Trypes ????

[Bob H. Tikos]

> Serafeim Papastefanos wrote:
> 
> Geia sas,
> Otan evala to linux peiraksa to /etc/inetd.conf kai ekana oles tis
> grammes me tis diafores ipiresies commented (telnet, ftp ktlp) opws
> mou eixan pei gia megaliteri asfaleia. Proxtes anoiksa tixaia to
> /var/log/messages kai eida oti kapoioi hacker eixan mpei sto sistima
> moy apo telnet. Otan koitaksa to /etc/inetd.conf ipirxan sto telos 2
> grammes me telnet kai ftp kai ena arxeio /etc/inetd.conf?  pou eixe
> aytes tis grammes.Yparxei kapoia trypa? <<Mpalwnetai>> ?Episis pws
> aytos pou mpike emathe to password moy? H dianomi einai slackware
> linux 3.6. Mpainw panw apo 1 xrono me windows 95 internet kai pote den
> me hackepsan apo ekei. Telika mipws to linux den einai toso asfales
> oso lene?
> serafeim at otenet.gr


Kat'arxhn ,

 Den einai mono to inetd.conf pou prepei na koitaksei kaneis . An
alakseis
to inetd.conf prepei na to kaneis: killall -HUP inetd (h kill -HUP "to
pid 
tou inetd") gia na ksanadiabasei to conf ksana xwris na xreiastei na
skwtoseis
kai na ksanarxhseis to daemona (h prin to epomeno reboot) .

Deuteron : Koitakse to /etc/hosts.allow h/kai /etc/hosts.deny gia to ti
exoun 
gramena . Shnythws einai adeia . Alla thelei prosoxh, giati poloi
daemones einai compiled me libwrap support opote an valeis kati san :
ALL: ALL: deny 
tha exeis provlhmata sto diko sou to mhxanhma. Kati kalo gia arxh tha
htan :
ALL: localhost: allow
ALL: 127.0.0.1: allow
ALL: ALL: deny

Triton :
 kai kyriwteron . Den einai mono to inetd ayto to opoio exei daemon
control .
Na mhn ksexname oti (se RedHat) polloi deamones ksekinoun apo
/etc/rc.d/init.d
kai analogws to runlevel : rc{0123456ABCDEF$#%^&*(}.d ( opws rc3.d/S*
gia
multiuser/network klp). Me to (se X)linuxconf->Control->ControlPanel
->ControlServiceActivity mporei kaneis na kleisei polous daemones pou
den
 xrhsimopoiei. Se ena standalone-workstasion :
 atd,crond,inet,kerneld,keytable,network(?),portmap,random,syslog nomizw
einai
arketoi gia th leitourgeia tou systhmatos. Kai pali merikoi apo autous
den
einai aparethtoi.
To idio mporei kaneis na kanei kai apo terminal/console me to "ntsysv"

Ta parapanw einai orismena basika pragmata pou nomizw einai "MUST" prin
apo
kati san "/etc/sysconfig/network-scripts/ifup eth0" (Sorry pou mhlaw
RedHat) 
Me alla logia prin anebei ena mhxanima sto dyktio.... ;-|

A kai kati allo. Den kserw gia ta ala distributions, alla h RedHat otan
teleiwnei to setup, exei pollous daemones kai trexoun. httpd,nfsd  px.
den xreiazontai gia kapoio mhxanima pou tha kanei ppp sto diktio. Akoma
kai gia ena mhxanima pou arxika mpenei panw se opoio dipote dyktio.

"It is best to close everything down, and then open up as needed"
                                                           
ypofainomenos

KAI NA MHN KSEXNATE NA KOITATE GIA "PATCHES" mucho importante!!!!!


Mpampis.

-- 
  Haralabos Bob Tikos -Systems Programmer/Administrator 
Eniac2000 Project, CIS Department, University of Pennsylvania
http://reno.cis.upenn.edu  Tel.: +.215.573.8149                 
"Power should be distributed equally among those who are not in love
with it"  Plato
--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr/archives
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users at hellug.gr
====================================================================