Listing 1: Services in inetd that should be turned off (excluding telnet and ftp)
shell - Remote Shell
login - Remote Login
exec - Remote Execution
comsat - notification of mail on local host
talk - permits users to talk to one another using the talk program
name - support for the obsolete DARPA name server protocol
uucp - Unix to Unix Copy
tftp - Trivial File Transfer program
finger - provides information about users on a system
systat - provides system information to remote clients
netstat - provides network information to remote systems
time
echo
discard
daytime - support for returning the time of day
chargen - character generator
sadmind - used by Soltice AdminSuite
rquotad - needed only to show quotas for a user of an NFS filesystem
rusersd - provides information on system users
sprayd - used only for testing.
rstatd - needed by perfmeter - use xload.
rwalld - allows non-local individuals to post messages to users on a
system
rexd - RPC server for remote program execution - minimal
authentication
ufsd - only needs to be uncommented if Solstice DiskSuite is
installed and being used
kcms_server - Kodak Color Management Suite
cachefsd - needed only if cachefs is being used with NFS
kerbd - needed if Kerberos is being used for system security
in.lpd - needed only if your machine is running a local print spool;
only stops the machine from being used as a BSD print server,
does not affect the System V lpsched.
gssd - ?
dtspcd - used by the desktop to launch remote applications
xaudio - X based audio
rpc.cmsd - maintains the information for the Calendar Manager Service
rpc.ttdbserverd - ToolTalk Database Server Daemon
|