This is a multi-part message in MIME format.
------=_NextPart_000_0022_01C09B56.278208E0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
With Mandrake 7.2, they no longer use inetd, they use xinetd, which I'm =
not familiar with. I #'d out the telnet and ftp ports in =
/etc/xinetd.conf, but it still allows it, so I removed telnet from =
/etc/xinet.d/ and now telnet is blocked, but FTP still is going, does =
anyone know how to disable FTP on Mandrake 7.2?
I'm also getting these messages in my secure log:
Feb 20 02:08:29 gizmo xinetd[578]: START: ftp pid=3D3515 =
from=3D127.0.0.1
Feb 20 02:08:29 gizmo xinetd[3515]: USERID: ftp OTHER :root
Feb 20 02:08:39 gizmo xinetd[578]: EXIT: ftp pid=3D3515 =
duration=3D11(sec)
Feb 20 02:08:39 gizmo xinetd[578]: START: ftp pid=3D3518 =
from=3D127.0.0.1
Feb 20 02:08:39 gizmo xinetd[3518]: USERID: ftp OTHER :root
Feb 20 02:08:45 gizmo xinetd[578]: EXIT: ftp pid=3D3518 =
duration=3D6(sec)
I'm not sure if I should be concerned about this or not, but since I =
havent FTP'd in from root, I should be.. I guess?
-Tyler
------=_NextPart_000_0022_01C09B56.278208E0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
With Mandrake 7.2, they no longer use =
inetd, they=20
use xinetd, which I'm not familiar with. I #'d out the telnet and =
ftp=20
ports in /etc/xinetd.conf, but it still allows it, so I removed telnet =
from=20
/etc/xinet.d/ and now telnet is blocked, but FTP still is going, does =
anyone=20
know how to disable FTP on Mandrake 7.2?
I'm also getting these messages in my =
secure=20
log:
Feb 20 02:08:29 gizmo xinetd[578]: =
START: ftp=20
pid=3D3515 from=3D127.0.0.1
Feb 20 02:08:29 gizmo xinetd[3515]: =
USERID: ftp OTHER=20
:root
Feb 20 02:08:39 gizmo xinetd[578]: EXIT: ftp pid=3D3515=20
duration=3D11(sec)
Feb 20 02:08:39 gizmo xinetd[578]: START: ftp =
pid=3D3518=20
from=3D127.0.0.1
Feb 20 02:08:39 gizmo xinetd[3518]: USERID: ftp =
OTHER=20
:root
Feb 20 02:08:45 gizmo xinetd[578]: EXIT: ftp pid=3D3518=20
duration=3D6(sec)
I'm not sure if I should be concerned =
about this or=20
not, but since I havent FTP'd in from root, I should be.. I =
guess?
-Tyler
------=_NextPart_000_0022_01C09B56.278208E0--