From owner-freebsd-questions@FreeBSD.ORG  Tue Oct  7 14:57:50 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ED94516A4B3
	for <freebsd-questions@freebsd.org>;
	Tue,  7 Oct 2003 14:57:50 -0700 (PDT)
Received: from buh.cameradicommercio.ro (buh.cameradicommercio.ro
	[81.196.25.19])	by mx1.FreeBSD.org (Postfix) with ESMTP id 3951043FE1
	for <freebsd-questions@freebsd.org>;
	Tue,  7 Oct 2003 14:57:29 -0700 (PDT)
	(envelope-from itetcu@apropo.ro)
Received: from buh.cameradicommercio.ro (localhost [127.0.0.1])
	by buh.cameradicommercio.ro (Postfix) with SMTP
	id DE58455; Wed,  8 Oct 2003 00:57:27 +0300 (EEST)
Date: Wed, 8 Oct 2003 00:57:27 +0300
From: Ion-Mihai Tetcu <itetcu@apropo.ro>
To: darryl@osborne-ind.com
Message-Id: <20031008005727.46d8ac9d.itetcu@apropo.ro>
In-Reply-To: <00c101c38d19$c4f3d9c0$0701a8c0@darryl>
References: <00c101c38d19$c4f3d9c0$0701a8c0@darryl>
X-Mailer: Sylpheed version 0.9.3claws (GTK+ 1.2.10; i386-portbld-freebsd5.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
cc: freebsd-questions@freebsd.org
Subject: Re: Inetd services question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Oct 2003 21:57:51 -0000

On Tue, 7 Oct 2003 16:27:10 -0500
"Darryl Hoar" <darryl@osborne-ind.com> wrote:

> Greetings,
> I am running 4.7-stable.  My machine has an internet facing 
> network interface, and a private LAN (192.168.1.X) facing interface.
> 
> Question:  Can you enable a well known service in inetd.conf, and
> have it only available for the private interface?  IE, no hacking
> from outside ?

In hosts.allow put:

service_name_or_port(s) : 192.168.1.1/255.255.255.0 : allow
ALL : ALL : DENY

see also :

tcpdmatch(8)
ftpchroot(5)
ftpd(8)

security(7)
ipfw(8)




-- 
IOnut
FreeBSD unregistered ;) user