Securing Network Services

The /etc/inetd.conf file is where you begin configuring most of the network services for your computer. You can stop these services by placing a pound sign (#) in front of the services that are not required for operation. One method you can use to do this is to comment out everything in the inetd.conf file (after making a backup, of course) and add them back as you need them. You should comment out the following services:

  • ftp— Allows a user to transfer files to or from a host.

  • tftp— Allows remote users to transfer files from a host without requiring a login.

  • systat— Invokes /bin/ps -auxww, which shows you processes running as well as the user it runs as.

  • rexd— Allows remote users to run RPC programs on a host.

  • ypupdated ...

Get CCIE Practical Studies: Security (CCIE Self-Study) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.