okaです、お世話になります。
turbolinux w6.0を使っています。(イントール済みのものをそのま
ま)
hosts.allowのエラーについて教えてください。
一、
hosts.deny
ALL: ALL
hosts.allow
ALL : 192.168.0.0/255.255.255.0 127.0.0.
/usr/sbin/tcpdchk -v
結果
warning : /etc/inetd.conf,line82:clock: not found: no such file or directory
using network configuration file : /etc/inetd.conf
>>>rule /etc/hosts.allow line 9:
deamon : all
clients : 192.168.0.0/255.255.255.0 127.0.0.1
warning : /etc/hosts.allow line 9:cannot verify hostname:gethostbyname
(localhost.localdomain)failed
access : granted
>>>rule /etc/hosts.deny line 8:
deamon : all
clients : all
access : denied
/usr/sbin/tcpdmatch all 192.168.0.4
結果
warning : /etc/inetd.conf,line82:clock: not found: no such file or directory
clients : address 192.168.0.4
server : process all
matchd : /etc/hosts.allow line 9:
access : granted
警告の原因はなんでしょうか
hostnameが確認できないとは、どういう意味でしょうか。
clock のエラーが出ています。
clock のfile というのがあるんでしょうか。
二、
「特に理由がない限りinetdは走らせるべきでなく、代わりにtcpserverを
使うべきである。」とsecurity for linux にあるのですが、turbolinux
w6.0用というのがあるのでしょううか。
RPMを入手できるところを教えて頂けないでしょうか。
三、
inetd.conf です。
swat 以外はそのままです。
#
# inetd.conf This file describes the services that will be available
# through the INETD TCP/IP super server. To re-configure
# the running INETD process, edit this file, then send the
# INETD process a SIGHUP signal.
#
# Version: @(#)/etc/inetd.conf 3.10 05/27/93
#
# Authors: Original taken from BSD UNIX 4.3/TAHOE.
# Fred N. van Kempen, <waltje _at_ uwalt.nl.mugnet.org>
#
# Modified for Debian Linux by Ian A. Murdock <imurdock _at_ shell.portal.com>
#
# Modified for RHS Linux by Marc Ewing <marc _at_ redhat.com>
# Modified for TurboLinux/TurboLinux Server by Scott Stone
# <sstone _at_ turbolinux.com>
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
# Echo, discard, daytime, and chargen are used primarily for testing.
#
# To re-read this file after changes, just do a 'killall -HUP inetd'
#
echo stream tcp nowait root internal
echo dgram udp wait root internal
discard stream tcp nowait root internal
discard dgram udp wait root internal
daytime stream tcp nowait root internal
daytime dgram udp wait root internal
chargen stream tcp nowait root internal
chargen dgram udp wait root internal
#
# These are standard services.
#
#ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -l -a
#telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd -h
#gopher stream tcp nowait root /usr/sbin/tcpd gn
# do not uncomment smtp unless you *really* know what you are doing.
# smtp is handled by the sendmail daemon now, not smtpd. It does NOT
# run from here, it is started at boot time from /etc/rc.d/rc#.d.
#smtp stream tcp nowait root /usr/bin/smtpd smtpd
#nntp stream tcp nowait root /usr/sbin/tcpd in.nntpd
#
# Shell, login, exec and talk are BSD protocols.
#
#shell stream tcp nowait root /usr/sbin/tcpd in.rshd
#login stream tcp nowait root /usr/sbin/tcpd in.rlogind
#exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
#talk dgram udp wait root /usr/sbin/tcpd in.talkd
#ntalk dgram udp wait root /usr/sbin/tcpd in.ntalkd
#dtalk stream tcp wait nobody /usr/sbin/tcpd in.dtalkd
#
# Pop and imap mail services et al
#
#pop-2 stream tcp nowait root /usr/sbin/tcpd ipop2d
#pop-3 stream tcp nowait root /usr/sbin/tcpd ipop3d
#imap stream tcp nowait root /usr/sbin/tcpd imapd
#
# The Internet UUCP service.
#
#uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting. Most sites
# run this only on machines acting as "boot servers." Do not uncomment
# this unless you *need* it.
#
#tftp dgram udp wait root /usr/sbin/tcpd in.tftpd
#bootps dgram udp wait root /usr/sbin/tcpd bootpd
#
# Finger, systat and netstat give out user information which may be
# valuable to potential "system crackers." Many sites choose to disable
# some or all of these services to improve security.
#
# cfinger is for GNU finger, which is currently not in use in RHS Linux
#
#finger stream tcp nowait root /usr/sbin/tcpd in.fingerd
#cfinger stream tcp nowait root /usr/sbin/tcpd in.cfingerd
#systat stream tcp nowait guest /usr/sbin/tcpd /bin/ps -auwwx
#netstat stream tcp nowait guest /usr/sbin/tcpd /bin/netstat -f inet
#
# Time service is used for clock syncronization.
#
#time stream tcp nowait nobody /usr/sbin/tcpd in.timed
#time dgram udp wait nobody /usr/sbin/tcpd in.timed
#
# Authentication
#
#auth stream tcp nowait nobody /usr/sbin/in.identd
in.identd -l -e -o
#
# End of inetd.conf
swat stream tcp nowait.400 root /usr/sbin/swat swat
Follow-Ups:
- [linux-users:87047] Re: hosts.allowISHIOKA Takashi
- [linux-users:87057] Re: hosts.allowOOSATO,Kazzrou
- Prev by Subject: [linux-users:87031] SOHO用ダイアルアップルータの配置位置
- Next by Subject: [linux-users:87033] Re: kernel2.4上のIDE-RAID
- Previous by thread: [linux-users:87046] Re: SOHO用ダイアルアップルータの配置位置
- Next by thread: [linux-users:87047] Re: hosts.allow
- Indexes:[Main][Thread]