Configuring Standard TCP/IP Services

Services such as telnet, ftp, and rlogin are started by the inetd daemon, which runs automatically at boot time. Refer to the inetd(1M) and inetd.conf(4) man pages.

In addition to the service definitions in the /etc/inetd.conf file, you can configure inetd by using the /etc/default/inetd file. For example, you can configure the logging of all incoming connections. You can also configure the use of the TCP Wrappers facility for access control.

How to Log the IP Addresses of All Incoming TCP Connections

1. Become superuser.

2. Turn logging on by editing the /etc/default/inetd file by adding the following line:

   ENABLE_CONNECTION_LOGGING=YES

   ---

   Note –

   If the previous line already exists with a comment symbol, then you can just delete the comment symbol.

   ---

3. Kill the inetd daemon.

4. Restart the inetd daemon.

See System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP) and System Administration Guide: Naming and Directory Services (FNS and NIS+) for further information on name services.

How to Use TCP Wrappers to Control Access to TCP Services

1. Become superuser.

2. Turn TCP Wrappers on by editing the /etc/default/inetd file by adding the following line.

   ENABLE_TCPWRAPPERS=YES

   ---

   Note –

   If the previous line already exists with a comment symbol, then you can just delete the comment symbol.

   ---

3. Kill the inetd daemon.

4. Restart the inetd daemon.

5. Configure the TCP Wrappers access control policy as described in the hosts_access(4) man page.