inetd.conf revision 126758
150472Speter# $FreeBSD: head/etc/inetd.conf 126758 2004-03-08 23:18:50Z ale $ 237Srgrimes# 337Srgrimes# Internet server configuration database 437Srgrimes# 581020Srwatson# Define *both* IPv4 and IPv6 entries for dual-stack support. 681020Srwatson# To disable a service, comment it out by prefixing the line with '#'. 781020Srwatson# To enable a service, remove the '#' at the beginning of the line. 837Srgrimes# 981020Srwatson#ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l 1081020Srwatson#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l 11116119Smarkm#ssh stream tcp nowait root /usr/sbin/sshd sshd -i -4 12116119Smarkm#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i -6 1381020Srwatson#telnet stream tcp nowait root /usr/libexec/telnetd telnetd 1481020Srwatson#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd 1566621Skris#shell stream tcp nowait root /usr/libexec/rshd rshd 1675017Speter#shell stream tcp6 nowait root /usr/libexec/rshd rshd 1766621Skris#login stream tcp nowait root /usr/libexec/rlogind rlogind 1875017Speter#login stream tcp6 nowait root /usr/libexec/rlogind rlogind 1966568Sjkh#finger stream tcp nowait/3/10 nobody /usr/libexec/fingerd fingerd -s 2075017Speter#finger stream tcp6 nowait/3/10 nobody /usr/libexec/fingerd fingerd -s 213190Spst#exec stream tcp nowait root /usr/libexec/rexecd rexecd 2281020Srwatson# 2341444Sdillon# run comsat as root to be able to print partial mailbox contents w/ biff, 2441444Sdillon# or use the safer tty:tty to just print that new mail has been received. 2581020Srwatson#comsat dgram udp wait tty:tty /usr/libexec/comsat comsat 2681020Srwatson# 2781020Srwatson# ntalk is required for the 'talk' utility to work correctly 2881020Srwatson#ntalk dgram udp wait tty:tty /usr/libexec/ntalkd ntalkd 2985298Sobrien#tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot 3094444Sume#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -s /tftpboot 3118639Spst#bootps dgram udp wait root /usr/libexec/bootpd bootpd 3218639Spst# 3318639Spst# "Small servers" -- used to be standard on, but we're more conservative 3418639Spst# about things due to Internet security concerns. Only turn on what you 3518639Spst# need. 3618639Spst# 3718639Spst#daytime stream tcp nowait root internal 3875017Speter#daytime stream tcp6 nowait root internal 3918639Spst#daytime dgram udp wait root internal 4075017Speter#daytime dgram udp6 wait root internal 4118639Spst#time stream tcp nowait root internal 4275017Speter#time stream tcp6 nowait root internal 4318639Spst#time dgram udp wait root internal 4475017Speter#time dgram udp6 wait root internal 4518639Spst#echo stream tcp nowait root internal 46116119Smarkm#echo stream tcp6 nowait root internal 47116119Smarkm#echo dgram udp wait root internal 4875017Speter#echo dgram udp6 wait root internal 4918639Spst#discard stream tcp nowait root internal 5075017Speter#discard stream tcp6 nowait root internal 5118639Spst#discard dgram udp wait root internal 5275017Speter#discard dgram udp6 wait root internal 5318639Spst#chargen stream tcp nowait root internal 5475017Speter#chargen stream tcp6 nowait root internal 5518639Spst#chargen dgram udp wait root internal 5675017Speter#chargen dgram udp6 wait root internal 5718639Spst# 5855115Speter# CVS servers - for master CVS repositories only! You must set the 5955115Speter# --allow-root path correctly or you open a trivial to exploit but 6055115Speter# deadly security hole. 6118639Spst# 6255115Speter#cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here pserver 6391929Sdd#cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here kserver 64591Srgrimes# 65101595Sgordon# RPC based services (you MUST have rpcbind running to use these) 66831Sats# 6718639Spst#rstatd/1-3 dgram rpc/udp wait root /usr/libexec/rpc.rstatd rpc.rstatd 6818639Spst#rusersd/1-2 dgram rpc/udp wait root /usr/libexec/rpc.rusersd rpc.rusersd 6918639Spst#walld/1 dgram rpc/udp wait root /usr/libexec/rpc.rwalld rpc.rwalld 7018639Spst#pcnfsd/1-2 dgram rpc/udp wait root /usr/libexec/rpc.pcnfsd rpc.pcnfsd 7118639Spst#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad 7218639Spst#sprayd/1 dgram rpc/udp wait root /usr/libexec/rpc.sprayd rpc.sprayd 7318639Spst# 7418639Spst# example entry for the optional pop3 server 7518639Spst# 764652Sats#pop3 stream tcp nowait root /usr/local/libexec/popper popper 77831Sats# 7821613Sache# example entry for the optional imap4 server 7921613Sache# 8021613Sache#imap4 stream tcp nowait root /usr/local/libexec/imapd imapd 8121613Sache# 82115892Syar# example entry for the optional nntp server 83115892Syar# 84115892Syar#nntp stream tcp nowait news /usr/local/libexec/nntpd nntpd 85115892Syar# 8684265Skris# example entry for the optional uucpd server 87115892Syar# 8884265Skris#uucpd stream tcp nowait root /usr/local/libexec/uucpd uucpd 8984265Skris# 9048845Ssheldonh# Return error for all "ident" requests 9140911Sphk# 9248845Ssheldonh#auth stream tcp nowait root internal 9375017Speter#auth stream tcp6 nowait root internal 9440911Sphk# 9549034Ssheldonh# Provide internally a real "ident" service which provides ~/.fakeid support, 9649059Sgreen# provides ~/.noident support, reports UNKNOWN as the operating system type 9749059Sgreen# and times out after 30 seconds. 9818639Spst# 9949059Sgreen#auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 10075017Speter#auth stream tcp6 nowait root internal auth -r -f -n -o UNKNOWN -t 30 10129951Sjkh# 10248845Ssheldonh# Example entry for an external ident server 10348845Ssheldonh# 10448846Sgreen#auth stream tcp wait root /usr/local/sbin/identd identd -w -t120 10548845Ssheldonh# 10655779Sdbaker# Example entry for the optional qmail MTA 10755779Sdbaker# NOTE: This is no longer the correct way to handle incoming SMTP 10855779Sdbaker# connections for qmail. Use tcpserver (http://cr.yp.to/ucspi-tcp.html) 10955779Sdbaker# instead. 11037741Shoek# 11137741Shoek#smtp stream tcp nowait qmaild /var/qmail/bin/tcp-env tcp-env /var/qmail/bin/qmail-smtpd 11237741Shoek# 11329951Sjkh# Enable the following two entries to enable samba startup from inetd 11484400Sjkh# (from the Samba documentation). Enable the third entry to enable the swat 11584400Sjkh# samba configuration tool. 11629951Sjkh# 11784767Sobrien#netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd 11884767Sobrien#netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd 11990600Smaxim#swat stream tcp nowait/400 root /usr/local/sbin/swat swat 120126756Smlaier# 121126756Smlaier# Enable the following entry to enable ftp-proxy to NAT ftp sessions with pf 122126758Sale# N.B.: inetd binds to * in the default installation so you should add 123126758Sale# an appropriate block rule to your pf.conf 124126756Smlaier# 125126756Smlaier#ftp-proxy stream tcp nowait root /usr/local/libexec/ftp-proxy ftp-proxy 126