[lug] Re: xinetd config (D. Stimits)

[Gary Frerking (TurboPower)]

>> I tested to be sure port 113 was truly dead via telnet to it on the
machine I was logging in from. Does anyone know of another trick so I can
force identd to be used or else to deny all connection based services? <<

As with most other things in Unix, there are several ways to do it.

With Redhat, I generally use the chkconfig command line utility to shut
things off.

  chkconfig --list

will list all of your services, and their status at each run level (and
there's a section at the bottom of the listing that shows the status of
xinetd based services.

You can also turn services on and off with chkconfig too:

For xinetd services, something like:

  chkconfig telnet off

will do it I think (going from memory, check the help or man page to be
sure).

And for daemons, you specify the run level:

  chkconfig sendmail 234 off

(again, going from memory).

Another tool that can turn off network daemons is ntsysv

Instead of using telnet to verify ports being shut, you might try a port
scanning tool like nmap -- it's a lot easier, and is more thorough.

-- Gary