This is a multi-part message in MIME format.
------=_NextPart_000_0022_01C09B56.278208E0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
With Mandrake 7.2, they no longer use inetd, they use xinetd, which I'm =
not familiar with. I #'d out the telnet and ftp ports in =
/etc/xinetd.conf, but it still allows it, so I removed telnet from =
/etc/xinet.d/ and now telnet is blocked, but FTP still is going, does =
anyone know how to disable FTP on Mandrake 7.2?
I'm also getting these messages in my secure log:
Feb 20 02:08:29 gizmo xinetd[578]: START: ftp pid=3D3515 =
from=3D127.0.0.1
Feb 20 02:08:29 gizmo xinetd[3515]: USERID: ftp OTHER :root
Feb 20 02:08:39 gizmo xinetd[578]: EXIT: ftp pid=3D3515 =
duration=3D11(sec)
Feb 20 02:08:39 gizmo xinetd[578]: START: ftp pid=3D3518 =
from=3D127.0.0.1
Feb 20 02:08:39 gizmo xinetd[3518]: USERID: ftp OTHER :root
Feb 20 02:08:45 gizmo xinetd[578]: EXIT: ftp pid=3D3518 =
duration=3D6(sec)
I'm not sure if I should be concerned about this or not, but since I =
havent FTP'd in from root, I should be.. I guess?
-Tyler
------=_NextPart_000_0022_01C09B56.278208E0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4611.1300" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>With Mandrake 7.2, they no longer use =
inetd, they=20
use xinetd, which I'm not familiar with. I #'d out the telnet and =
ftp=20
ports in /etc/xinetd.conf, but it still allows it, so I removed telnet =
from=20
/etc/xinet.d/ and now telnet is blocked, but FTP still is going, does =
anyone=20
know how to disable FTP on Mandrake 7.2?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I'm also getting these messages in my =
secure=20
log:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Feb 20 02:08:29 gizmo xinetd[578]: =
START: ftp=20
pid=3D3515 from=3D127.0.0.1<BR>Feb 20 02:08:29 gizmo xinetd[3515]: =
USERID: ftp OTHER=20
:root<BR>Feb 20 02:08:39 gizmo xinetd[578]: EXIT: ftp pid=3D3515=20
duration=3D11(sec)<BR>Feb 20 02:08:39 gizmo xinetd[578]: START: ftp =
pid=3D3518=20
from=3D127.0.0.1<BR>Feb 20 02:08:39 gizmo xinetd[3518]: USERID: ftp =
OTHER=20
:root<BR>Feb 20 02:08:45 gizmo xinetd[578]: EXIT: ftp pid=3D3518=20
duration=3D6(sec)</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I'm not sure if I should be concerned =
about this or=20
not, but since I havent FTP'd in from root, I should be.. I =
guess?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>-Tyler</FONT></DIV>
<DIV> </DIV></BODY></HTML>
------=_NextPart_000_0022_01C09B56.278208E0--
(text/plain)