Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Oct 2003 00:57:27 +0300
From:      Ion-Mihai Tetcu <itetcu@apropo.ro>
To:        darryl@osborne-ind.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Inetd services question
Message-ID:  <20031008005727.46d8ac9d.itetcu@apropo.ro>
In-Reply-To: <00c101c38d19$c4f3d9c0$0701a8c0@darryl>
References:  <00c101c38d19$c4f3d9c0$0701a8c0@darryl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 7 Oct 2003 16:27:10 -0500
"Darryl Hoar" <darryl@osborne-ind.com> wrote:

> Greetings,
> I am running 4.7-stable.  My machine has an internet facing 
> network interface, and a private LAN (192.168.1.X) facing interface.
> 
> Question:  Can you enable a well known service in inetd.conf, and
> have it only available for the private interface?  IE, no hacking
> from outside ?

In hosts.allow put:

service_name_or_port(s) : 192.168.1.1/255.255.255.0 : allow
ALL : ALL : DENY

see also :

tcpdmatch(8)
ftpchroot(5)
ftpd(8)

security(7)
ipfw(8)




-- 
IOnut
FreeBSD unregistered ;) user



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031008005727.46d8ac9d.itetcu>