stop services

[Asif Chaudhary]

Hi,

I have new setup and want to do some tasks related to security.

1. I need to stop Apache service on startup.
2. Disabe Crontab for everyone(only few users can use it)
3. No one can ftp by user root.
4. No one can remote login by user root
5. No one can use telnet service
6. Disable Reverse DNS lookup by SSH

Regrds,

AFA

[Calandrello]

Friend
1- stop apache :
/sbin/init.d/hpws_apache stop
2- set cron for users :
cron.allow
4- set rlogin :
more .rhosts it writes root after the name or IP of schemes
5-telnet :
/etc/inetd.conf
comment service telnet it restarts the service : inetd -c

[Ivan Krastev]

1. Edit /etc/rc.config.d/apacheconf
and change
APACHE_START=1
to
APACHE_START=0


2. Edit /var/adm/cron/cron.allow and list only users permited to use crontab.

3. Add root in /etc/ftpd/ftpusers

4. Add console in /etc/securetty to disable telnet access for root.
Edin /etc/opt/ssh/sshd_config and add

PermitRootLogin no
Reload ssh service.

5. Comment line for telnet in inetd.conf


regards,
ivan

[Steven E. Protter]

Shalom,

1.) vi /etc/rc.config.d/hpws_apache
change the first variable to zero.
2.) Already done by default.
3.) Add root the the ftpusers file. Test it, se veral versions of ftp ignored this feature.
4.) already posted correctly to the thread.
5.)vi /etc/inetd.conf comment out telnetd line inetd -k inetd -c
6.) Can't be done. If ssh is installed it can run any nslookup command you desire. You can change permissions on nslookup in order to perven non-root users from using it. Only workable apporach here is by permissions.

SEP