안녕하세요?
inetd.conf 파일에서 원하는 서비스를 제외하고 모두 주석처리(#) 하면 됩니다.
services 파일은 건드리지 않아야 합니다. 이 파일에서 있어야 할 부분이 주석처리되면
자신이 서버를 사용하는데 오히려 더 불편해지거나 문제가 생길 수 있습니다.
- 성수,.
: 서버 진단을 받아보니깐.. 포트가 많이 열려있더라고 하더군요..
: 어디서 줏어 들은 얘기론.. /etc/services에 있는 걸 필요한거 빼고 주석처리 한담에 inetd를 re
: start하믄 댄다구 하던데.. (맞나? -_-;;) 글구.. 물론 inetd.conf 파일도 바꿔야죠, restart하기 전
: 에..
: 제가 하고 싶은건, ftp,telnet,sendmail,pop3,web/dns서버로 쓰려고 하는데..
: 포트가 많은건지.. 뭐가 몬지 잘 모르겠더군요.. services 목록이 하도 길어서..
:
: 어딜 어떻게 고쳐야 하는지 아시는 분.. 좀 도와주시면 고맙겠습니다.. ㅠ_ㅠ
: 현재 고쳐놓은 상탠데.. 맞는지도 모르겠고.. 좀 봐주세요~
:
: /etc/services
:
: # $Id: services,v 1.4 2000/01/23 21:03:36 notting Exp $
: #
: # Network services, Internet style
: #
: # Note that it is presently the policy of IANA to assign a single well-known
: # port number for both TCP and UDP; hence, most entries here have two entries
: # even if the protocol doesn't support UDP operations.
: # Updated from RFC 1700, ``Assigned Numbers'' (October 1994). Not all ports
: # are included, only the more common ones.
:
: tcpmux 1/tcp # TCP port service multiplexer
: echo 7/tcp
: echo 7/udp
: #discard 9/tcp sink null
: #discard 9/udp sink null
: #systat 11/tcp users
: daytime 13/tcp
: daytime 13/udp
: netstat 15/tcp
: qotd 17/tcp quote
: #msp 18/tcp # message send protocol
: #msp 18/udp # message send protocol
: chargen 19/tcp ttytst source
: chargen 19/udp ttytst source
: ftp-data 20/tcp
: ftp 21/tcp
: #fsp 21/udp fspd
: #ssh 22/tcp # SSH Remote Login Protocol
: #ssh 22/udp # SSH Remote Login Protocol
: telnet 23/tcp
: # 24 - private
: smtp 25/tcp mail
: # 26 - unassigned
: #time 37/tcp timserver
: #time 37/udp timserver
: rlp 39/udp resource # resource location
: nameserver 42/tcp name # IEN 116
: whois 43/tcp nicname
: re-mail-ck 50/tcp # Remote Mail Checking Protocol
: re-mail-ck 50/udp # Remote Mail Checking Protocol
: domain 53/tcp nameserver # name-domain server
: domain 53/udp nameserver
: #mtp 57/tcp # deprecated
: #bootps 67/tcp # BOOTP server
: #bootps 67/udp
: #bootpc 68/tcp # BOOTP client
: #bootpc 68/udp
: #tftp 69/udp
: #gopher 70/tcp # Internet Gopher
: #gopher 70/udp
: #rje 77/tcp netrjs
: #finger 79/tcp
: www 80/tcp http # WorldWideWeb HTTP
: www 80/udp # HyperText Transfer Protocol
: link 87/tcp ttylink
: kerberos 88/tcp kerberos5 krb5 # Kerberos v5
: kerberos 88/udp kerberos5 krb5 # Kerberos v5
: #supdup 95/tcp
: # 100 - reserved
: hostnames 101/tcp hostname # usually from sri-nic
: iso-tsap 102/tcp tsap # part of ISODE.
: csnet-ns 105/tcp cso-ns # also used by CSO name server
: csnet-ns 105/udp cso-ns
: # unfortunately the poppassd (Eudora) uses a port which has already
: # been assigned to a different service. We list the poppassd as an
: # alias here. This should work for programs asking for this service.
: # (due to a bug in inetd the 3com-tsmux line is disabled)
: #3com-tsmux 106/tcp poppassd
: #3com-tsmux 106/udp poppassd
: #rtelnet 107/tcp # Remote Telnet
: #rtelnet 107/udp
: #pop2 109/tcp pop-2 postoffice # POP version 2
: #pop2 109/udp pop-2
: pop3 110/tcp pop-3 # POP version 3
: pop3 110/udp pop-3
: #sunrpc 111/tcp portmapper # RPC 4.0 portmapper TCP
: #sunrpc 111/udp portmapper # RPC 4.0 portmapper UDP
: auth 113/tcp authentication tap ident
: #sftp 115/tcp
: #uucp-path 117/tcp
: #nntp 119/tcp readnews untp # USENET News Transfer Protocol
: #ntp 123/tcp
: #ntp 123/udp # Network Time Protocol
: netbios-ns 137/tcp # NETBIOS Name Service
: netbios-ns 137/udp
: netbios-dgm 138/tcp # NETBIOS Datagram Service
: netbios-dgm 138/udp
: netbios-ssn 139/tcp # NETBIOS session service
: netbios-ssn 139/udp
: #imap2 143/tcp imap # Interim Mail Access Proto v2
: #imap2 143/udp imap
: #snmp 161/udp # Simple Net Mgmt Proto
: #snmp-trap 162/udp snmptrap # Traps for SNMP
: #cmip-man 163/tcp # ISO mgmt over IP (CMOT)
: #cmip-man 163/udp
: #cmip-agent 164/tcp
: #cmip-agent 164/udp
: #xdmcp 177/tcp # X Display Mgr. Control Proto
: #xdmcp 177/udp
: #nextstep 178/tcp NeXTStep NextStep # NeXTStep window
: #nextstep 178/udp NeXTStep NextStep # server
: bgp 179/tcp # Border Gateway Proto.
: bgp 179/udp
: #prospero 191/tcp # Cliff Neuman's Prospero
: #prospero 191/udp
: #irc 194/tcp # Internet Relay Chat
: #irc 194/udp
: #smux 199/tcp # SNMP Unix Multiplexer
: #smux 199/udp
: #at-rtmp 201/tcp # AppleTalk routing
: #at-rtmp 201/udp
: #at-nbp 202/tcp # AppleTalk name binding
: #at-nbp 202/udp
: #at-echo 204/tcp # AppleTalk echo
: #at-echo 204/udp
: #at-zis 206/tcp # AppleTalk zone information
: #at-zis 206/udp
: #qmtp 209/tcp # The Quick Mail Transfer Protocol
: #qmtp 209/udp # The Quick Mail Transfer Protocol
: #z3950 210/tcp wais # NISO Z39.50 database
: #z3950 210/udp wais
: #ipx 213/tcp # IPX
: #ipx 213/udp
: imap3 220/tcp # Interactive Mail Access
: imap3 220/udp # Protocol v3
: #rpc2portmap 369/tcp
: #rpc2portmap 369/udp # Coda portmapper
: #codaauth2 370/tcp
: #codaauth2 370/udp # Coda authentication server
: #ulistserv 372/tcp # UNIX Listserv
: #ulistserv 372/udp
: #ldap 389/tcp # Lightweight Directory Access Protocol
: #ldap 389/udp # Lightweight Directory Access Protocol
: https 443/tcp # MCom
: https 443/udp # MCom
: #snpp 444/tcp # Simple Network Paging Protocol
: #snpp 444/udp # Simple Network Paging Protocol
: #saft 487/tcp # Simple Asynchronous File Transfer
: #saft 487/udp # Simple Asynchronous File Transfer
: #npmp-local 610/tcp dqs313_qmaster # npmp-local / DQS
: #npmp-local 610/udp dqs313_qmaster # npmp-local / DQS
: #npmp-gui 611/tcp dqs313_execd # npmp-gui / DQS
: #npmp-gui 611/udp dqs313_execd # npmp-gui / DQS
: #hmmp-ind 612/tcp dqs313_intercell# HMMP Indication / DQS
: #hmmp-ind 612/udp dqs313_intercell# HMMP Indication / DQS
: #
: # UNIX specific services
: #
: #exec 512/tcp
: #biff 512/udp comsat
: login 513/tcp
: #who 513/udp whod
: shell 514/tcp cmd # no passwords used
: syslog 514/udp
: #printer 515/tcp spooler # line printer spooler
: #talk 517/udp
: #ntalk 518/udp
: route 520/udp router routed # RIP
: timed 525/udp timeserver
: #tempo 526/tcp newdate
: #courier 530/tcp rpc
: #conference 531/tcp chat
: #netnews 532/tcp readnews
: netwall 533/udp # -for emergency broadcasts
: #uucp 540/tcp uucpd # uucp daemon
: #afpovertcp 548/tcp # AFP over TCP
: #afpovertcp 548/udp # AFP over TCP
: #remotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem
: #klogin 543/tcp # Kerberized `rlogin' (v5)
: #kshell 544/tcp krcmd # Kerberized `rsh' (v5)
: #kerberos-adm 749/tcp # Kerberos `kadmin' (v5)
: #
: webster 765/tcp # Network dictionary
: webster 765/udp
: #swat 901/tcp # Samba Web Administration Tool
: #
: # From ``Assigned Numbers'':
: #
: #> The Registered Ports are not controlled by the IANA and on most systems
: #> can be used by ordinary user processes or programs executed by ordinary
: #> users.
: #
: #> Ports are used in the TCP [45,106] to name the ends of logical
: #> connections which carry long term conversations. For the purpose of
: #> providing services to unknown callers, a service contact port is
: #> defined. This list specifies the port used by the server process as its
: #> contact port. While the IANA can not control uses of these ports it
: #> does register or list uses of these ports as a convienence to the
: #> community.
: #
: #ingreslock 1524/tcp
: #ingreslock 1524/udp
: #prospero-np 1525/tcp # Prospero non-privileged
: #prospero-np 1525/udp
: #datametrics 1645/tcp old-radius # datametrics / old radius entry
: #datametrics 1645/udp old-radius # datametrics / old radius entry
: #sa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry
: #sa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry
: #radius 1812/tcp # Radius
: #radius 1812/udp # Radius
: #radacct 1813/tcp # Radius Accounting
: #radacct 1813/udp # Radius Accounting
: #cvspserver 2401/tcp # CVS client/server operations
: #cvspserver 2401/udp # CVS client/server operations
: #venus 2430/tcp # codacon port
: #venus 2430/udp # Venus callback/wbc interface
: #venus-se 2431/tcp # tcp side effects
: #venus-se 2431/udp # udp sftp side effect
: #codasrv 2432/tcp # not used
: #codasrv 2432/udp # server port
: #codasrv-se 2433/tcp # tcp side effects
: #codasrv-se 2433/udp # udp sftp side effect
: mysql 3306/tcp # MySQL
: mysql 3306/udp # MySQL
: #rfe 5002/tcp # Radio Free Ethernet
: #rfe 5002/udp # Actually uses UDP only
: #cfengine 5308/tcp # CFengine
: #cfengine 5308/udp # CFengine
: #bbs 7000/tcp # BBS service
: #
: #
: # Kerberos (Project Athena/MIT) services
: # Note that these are for Kerberos v4, and are unofficial. Sites running
: # v4 should uncomment these and comment out the v5 entries above.
: #
: kerberos4 750/udp kerberos-iv kdc # Kerberos (server) udp
: kerberos4 750/tcp kerberos-iv kdc # Kerberos (server) tcp
: kerberos_master 751/udp # Kerberos authentication
: kerberos_master 751/tcp # Kerberos authentication
: passwd_server 752/udp # Kerberos passwd server
: krb_prop 754/tcp # Kerberos slave propagation
: krbupdate 760/tcp kreg # Kerberos registration
: kpasswd 761/tcp kpwd # Kerberos "passwd"
: kpop 1109/tcp # Pop with Kerberos
: knetd 2053/tcp # Kerberos de-multiplexor
: #zephyr-srv 2102/udp # Zephyr server
: #zephyr-clt 2103/udp # Zephyr serv-hm connection
: #zephyr-hm 2104/udp # Zephyr hostmanager
: #eklogin 2105/tcp # Kerberos encrypted rlogin
: #
: # Unofficial but necessary (for NetBSD) services
: #
: #supfilesrv 871/tcp # SUP server
: #supfiledbg 1127/tcp # SUP debugging
: #
: # Datagram Delivery Protocol services
: #
: rtmp 1/ddp # Routing Table Maintenance Protocol
: nbp 2/ddp # Name Binding Protocol
: #echo 4/ddp # AppleTalk Echo Protocol
: #zip 6/ddp # Zone Information Protocol
: #
: # Services added for the Debian GNU/Linux distribution
: #poppassd 106/tcp # Eudora
: #poppassd 106/udp # Eudora
: #mailq 174/tcp # Mailer transport queue for Zmailer
: #mailq 174/udp # Mailer transport queue for Zmailer
: #ssmtp 465/tcp # SMTP over SSL
: #gdomap 538/tcp # GNUstep distributed objects
: #gdomap 538/udp # GNUstep distributed objects
: #snews 563/tcp # NNTP over SSL
: #ssl-ldap 636/tcp # LDAP over SSL
: #omirr 808/tcp omirrd # online mirror
: #omirr 808/udp omirrd # online mirror
: #rsync 873/tcp # rsync
: #rsync 873/udp # rsync
: #simap 993/tcp # IMAP over SSL
: #spop3 995/tcp # POP-3 over SSL
: socks 1080/tcp # socks proxy server
: socks 1080/udp # socks proxy server
: #rmtcfg 1236/tcp # Gracilis Packeten remote config server
: #xtel 1313/tcp # french minitel
: #support 1529/tcp # GNATS
: #cfinger 2003/tcp # GNU Finger
: #ninstall 2150/tcp # ninstall service
: #ninstall 2150/udp # ninstall service
: #afbackup 2988/tcp # Afbackup system
: #afbackup 2988/udp # Afbackup system
: #icp 3130/tcp # Internet Cache Protocol (Squid)
: #icp 3130/udp # Internet Cache Protocol (Squid)
: #postgres 5432/tcp # POSTGRES
: #postgres 5432/udp # POSTGRES
: #fax 4557/tcp # FAX transmission service (old)
: #hylafax 4559/tcp # HylaFAX client-server protocol (new
: )
: #noclog 5354/tcp # noclogd with TCP (nocol)
: #noclog 5354/udp # noclogd with UDP (nocol)
: #hostmon 5355/tcp # hostmon uses TCP (nocol)
: #hostmon 5355/udp # hostmon uses TCP (nocol)
: #ircd 6667/tcp # Internet Relay Chat
: #ircd 6667/udp # Internet Relay Chat
: webcache 8080/tcp # WWW caching service
: webcache 8080/udp # WWW caching service
: #tproxy 8081/tcp # Transparent Proxy
: #tproxy 8081/udp # Transparent Proxy
: #mandelspawn 9359/udp mandelbrot # network mandelbrot
: #amanda 10080/udp # amanda backup services
: #kamanda 10081/tcp # amanda backup services (Kerberos)
: #kamanda 10081/udp # amanda backup services (Kerberos)
: #amandaidx 10082/tcp # amanda backup services
: #amidxtape 10083/tcp # amanda backup services
: #isdnlog 20011/tcp # isdn logging system
: #isdnlog 20011/udp # isdn logging system
: #vboxd 20012/tcp # voice box system
: #vboxd 20012/udp # voice box system
: #binkp 24554/tcp # Binkley
: #binkp 24554/udp # Binkley
: #asp 27374/tcp # Address Search Protocol
: #asp 27374/udp # Address Search Protocol
: #tfido 60177/tcp # Ifmail
: #tfido 60177/udp # Ifmail
: #fido 60179/tcp # Ifmail
: #fido 60179/udp # Ifmail
:
: # Local services
:
: #linuxconf 98/tcp
:
: 거의 다 막을라고 웬만한덴 다 주석처리 했습니다.. 시스템이 잘돌아갈런지.. -_-;;
:
:
: /etc/inetd.conf
:
: # inetd.conf This file describes the services that will be available
: # through the INETD TCP/IP super server. To re-configure
: # the running INETD process, edit this file, then send the
: # INETD process a SIGHUP signal.
: #
: # Version: @(#)/etc/inetd.conf 3.10 05/27/93
: #
: # Authors: Original taken from BSD UNIX 4.3/TAHOE.
: # Fred N. van Kempen, <waltje at uwalt.nl.mugnet.org>
: #
: # Modified for Debian Linux by Ian A. Murdock <imurdock at shell.portal.com>
: #
: # Modified for RHS Linux by Marc Ewing <marc at redhat.com>
: #
: # <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
: #
: # Echo, discard, daytime, and chargen are used primarily for testing.
: #
: # To re-read this file after changes, just do a 'killall -HUP inetd'
: #
: #echo stream tcp nowait root internal
: #echo dgram udp wait root internal
: #discard stream tcp nowait root internal
: #discard dgram udp wait root internal
: #daytime stream tcp nowait root internal
: #daytime dgram udp wait root internal
: #chargen stream tcp nowait root internal
: #chargen dgram udp wait root internal
: #time stream tcp nowait root internal
: #time dgram udp wait root internal
: #
: # These are standard services.
: #
: #ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -l -a
: telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
: #
: # Shell, login, exec, comsat and talk are BSD protocols.
: #
: shell stream tcp nowait root /usr/sbin/tcpd in.rshd
: login stream tcp nowait root /usr/sbin/tcpd in.rlogind
: #exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
: #comsat dgram udp wait root /usr/sbin/tcpd in.comsat
: #talk dgram udp wait nobody.tty /usr/sbin/tcpd in.talkd
: #ntalk dgram udp wait nobody.tty /usr/sbin/tcpd in.ntalkd
: #dtalk stream tcp wait nobody.tty /usr/sbin/tcpd in.dtalkd
: #
: # Pop and imap mail services et al
: #
: #pop-2 stream tcp nowait root /usr/sbin/tcpd ipop2d
: pop-3 stream tcp nowait root /usr/sbin/tcpd ipop3d
: #imap stream tcp nowait root /usr/sbin/tcpd imapd
: #
: # The Internet UUCP service.
: #
: #uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
: #
: # Tftp service is provided primarily for booting. Most sites
: # run this only on machines acting as "boot servers." Do not uncomment
: # this unless you *need* it.
: #
: #tftp dgram udp wait root /usr/sbin/tcpd in.tftpd
: #bootps dgram udp wait root /usr/sbin/tcpd bootpd
: #
: # Finger, systat and netstat give out user information which may be
: # valuable to potential "system crackers." Many sites choose to disable
: # some or all of these services to improve security.
: #
: #finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd
: #cfinger stream tcp nowait root /usr/sbin/tcpd in.cfingerd
: #systat stream tcp nowait guest /usr/sbin/tcpd /bin/ps -auwwx
: #netstat stream tcp nowait guest /usr/sbin/tcpd /bin/netstat -f inet
: #
: # Authentication
: #
: # identd is run standalone now
: #
: #auth stream tcp wait root /usr/sbin/in.identd in.identd -e -o
: #
: # End of inetd.conf
:
: linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
:
: 현재 설정은 이렇습니다.. 맞나요? -_-;;;