sercure a brand-new unix box rx3440

[I.Delic]

Hi guy's,

Ik got new Unix box RX3440. I want to secure him.
FTP, TELENT, RLOGIN RSHELL i want to stop it or i want to allow some user to use it.
I want to lockup anonymos user . Is this a good idea ? I stil want to use my appache server.
Yes i kan find it al by myself but at this moement i don't have a much time
Can you pas me a some documentation about it ?

Thank you in advance

Idriz

[Thayanidhi]

Hi,

/var/adm/inetd.sec
file should me modified to allow/deny inet services. Example is available in the same file (commented).

Note: this will work for standard inet services which you mentioned. a application service such listner cannot be controlled using inetd.sec
Refer to the application vendor if you want to deny such services.

TT

[Con O'Kelly · Accepted solution]

Hi

In very simple terms you can disable these services by commenting them out in /etc/inetd.conf and then running the following command:
# inetd -c

As already stated you can use /var/adm/inetd.sec file to restrict access to these services.

You can download a good document from Centre for Internet Security which details steps involved in securing HP-UX servers.
http://www.cisecurity.org/bench_hpux.html

Also look at the Building a Bastion Host document which I have attached.

Cheers
Con