inetd.conf revision 126811
131492Swollman# $FreeBSD: head/etc/inetd.conf 126811 2004-03-10 15:06:17Z mlaier $ 231492Swollman# 331492Swollman# Internet server configuration database 431492Swollman# 531492Swollman# Define *both* IPv4 and IPv6 entries for dual-stack support. 631492Swollman# To disable a service, comment it out by prefixing the line with '#'. 731492Swollman# To enable a service, remove the '#' at the beginning of the line. 831492Swollman# 931492Swollman#ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l 1031492Swollman#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l 1131492Swollman#ssh stream tcp nowait root /usr/sbin/sshd sshd -i -4 1231492Swollman#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i -6 1331492Swollman#telnet stream tcp nowait root /usr/libexec/telnetd telnetd 1431492Swollman#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd 1531492Swollman#shell stream tcp nowait root /usr/libexec/rshd rshd 1631492Swollman#shell stream tcp6 nowait root /usr/libexec/rshd rshd 1731492Swollman#login stream tcp nowait root /usr/libexec/rlogind rlogind 1831492Swollman#login stream tcp6 nowait root /usr/libexec/rlogind rlogind 1931492Swollman#finger stream tcp nowait/3/10 nobody /usr/libexec/fingerd fingerd -s 20#finger stream tcp6 nowait/3/10 nobody /usr/libexec/fingerd fingerd -s 21#exec stream tcp nowait root /usr/libexec/rexecd rexecd 22# 23# run comsat as root to be able to print partial mailbox contents w/ biff, 24# or use the safer tty:tty to just print that new mail has been received. 25#comsat dgram udp wait tty:tty /usr/libexec/comsat comsat 26# 27# ntalk is required for the 'talk' utility to work correctly 28#ntalk dgram udp wait tty:tty /usr/libexec/ntalkd ntalkd 29#tftp dgram udp wait root /usr/libexec/tftpd tftpd -s /tftpboot 30#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -s /tftpboot 31#bootps dgram udp wait root /usr/libexec/bootpd bootpd 32# 33# "Small servers" -- used to be standard on, but we're more conservative 34# about things due to Internet security concerns. Only turn on what you 35# need. 36# 37#daytime stream tcp nowait root internal 38#daytime stream tcp6 nowait root internal 39#daytime dgram udp wait root internal 40#daytime dgram udp6 wait root internal 41#time stream tcp nowait root internal 42#time stream tcp6 nowait root internal 43#time dgram udp wait root internal 44#time dgram udp6 wait root internal 45#echo stream tcp nowait root internal 46#echo stream tcp6 nowait root internal 47#echo dgram udp wait root internal 48#echo dgram udp6 wait root internal 49#discard stream tcp nowait root internal 50#discard stream tcp6 nowait root internal 51#discard dgram udp wait root internal 52#discard dgram udp6 wait root internal 53#chargen stream tcp nowait root internal 54#chargen stream tcp6 nowait root internal 55#chargen dgram udp wait root internal 56#chargen dgram udp6 wait root internal 57# 58# CVS servers - for master CVS repositories only! You must set the 59# --allow-root path correctly or you open a trivial to exploit but 60# deadly security hole. 61# 62#cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here pserver 63#cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here kserver 64# 65# RPC based services (you MUST have rpcbind running to use these) 66# 67#rstatd/1-3 dgram rpc/udp wait root /usr/libexec/rpc.rstatd rpc.rstatd 68#rusersd/1-2 dgram rpc/udp wait root /usr/libexec/rpc.rusersd rpc.rusersd 69#walld/1 dgram rpc/udp wait root /usr/libexec/rpc.rwalld rpc.rwalld 70#pcnfsd/1-2 dgram rpc/udp wait root /usr/libexec/rpc.pcnfsd rpc.pcnfsd 71#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad 72#sprayd/1 dgram rpc/udp wait root /usr/libexec/rpc.sprayd rpc.sprayd 73# 74# example entry for the optional pop3 server 75# 76#pop3 stream tcp nowait root /usr/local/libexec/popper popper 77# 78# example entry for the optional imap4 server 79# 80#imap4 stream tcp nowait root /usr/local/libexec/imapd imapd 81# 82# example entry for the optional nntp server 83# 84#nntp stream tcp nowait news /usr/local/libexec/nntpd nntpd 85# 86# example entry for the optional uucpd server 87# 88#uucpd stream tcp nowait root /usr/local/libexec/uucpd uucpd 89# 90# Return error for all "ident" requests 91# 92#auth stream tcp nowait root internal 93#auth stream tcp6 nowait root internal 94# 95# Provide internally a real "ident" service which provides ~/.fakeid support, 96# provides ~/.noident support, reports UNKNOWN as the operating system type 97# and times out after 30 seconds. 98# 99#auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 100#auth stream tcp6 nowait root internal auth -r -f -n -o UNKNOWN -t 30 101# 102# Example entry for an external ident server 103# 104#auth stream tcp wait root /usr/local/sbin/identd identd -w -t120 105# 106# Example entry for the optional qmail MTA 107# NOTE: This is no longer the correct way to handle incoming SMTP 108# connections for qmail. Use tcpserver (http://cr.yp.to/ucspi-tcp.html) 109# instead. 110# 111#smtp stream tcp nowait qmaild /var/qmail/bin/tcp-env tcp-env /var/qmail/bin/qmail-smtpd 112# 113# Enable the following two entries to enable samba startup from inetd 114# (from the Samba documentation). Enable the third entry to enable the swat 115# samba configuration tool. 116# 117#netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd 118#netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd 119#swat stream tcp nowait/400 root /usr/local/sbin/swat swat 120# 121# Enable the following entry to enable ftp-proxy to NAT ftp sessions with pf 122# N.B.: inetd binds to * in the default installation so you should add 123# an appropriate block rule to your pf.conf 124# 125#ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy 126