PDA

View Full Version : Is it possible to use inetd.conf w/o tcpd?



FZ
06-05-2003, 08:27 PM
Hi,

I can use my Knoppix live cd for telnetting, ftp'ing to localhost w/o problems using the default
inetd.conf file which contains lines like:



ftp stream tcp nowait root /usr/sbin/tcpd /usr/sbin/in.ftpd
telnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/in.telnetd


However when I disable tcpd and try to use the barebone telnetd, ftpd, etc. using the
following configuration I cannot telnet or ftp to myself:



ftp stream tcp nowait root /usr/sbin/in.ftpd
telnet stream tcp nowait root /usr/sbin/in.telnetd


I rerun the inetd and then try to telnet to receive this response:



knoppix@ttyp4[knoppix]$ telnet localhost
Trying 127.0.0.1...
Connected to Knoppix.
Escape character is '^]'.
Connection closed by foreign host.


As you see, when I'm not using tcpd it just automatically disables telnet, ftp, etc. I've tried it
hosts.allow, hosts.deny, I've also tried it w/o these files. Nothing changes.

Is it impossible to use inetd without tcpd on Knoppix? If it is possible, how?

Thanks in advance.

Dave_Bechtel
06-07-2003, 01:03 AM
--Why would you want to? Tcpd wrapping results in better security. Are you trying to run ftp over UDP or something?

--Also, you really should be using ssh instead of telnet (ssh -2 -c blowfish is the fastest.)

--Check out this Google cache "What inetd is and how to secure it":
http://216.239.33.100/search?q=cache:rfG2iTsH-xQJ:www.sans.org/rr/unix/inetd.php+using+ftp+over+udp+instead+of+tcpd&hl=en&ie=UTF-8

--Also check here, it shows you how to run a standalone service:
http://www.linuxman.com.cy/rute/node32.html


Hi,

I can use my Knoppix live cd for telnetting, ftp'ing to localhost w/o problems using the default
inetd.conf file which contains lines like:



ftp stream tcp nowait root /usr/sbin/tcpd /usr/sbin/in.ftpd
telnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/in.telnetd


However when I disable tcpd and try to use the barebone telnetd, ftpd, etc. using the
following configuration I cannot telnet or ftp to myself:



ftp stream tcp nowait root /usr/sbin/in.ftpd
telnet stream tcp nowait root /usr/sbin/in.telnetd


I rerun the inetd and then try to telnet to receive this response:



knoppix@ttyp4[knoppix]$ telnet localhost
Trying 127.0.0.1...
Connected to Knoppix.
Escape character is '^]'.
Connection closed by foreign host.


As you see, when I'm not using tcpd it just automatically disables telnet, ftp, etc. I've tried it
hosts.allow, hosts.deny, I've also tried it w/o these files. Nothing changes.

Is it impossible to use inetd without tcpd on Knoppix? If it is possible, how?

Thanks in advance.

FZ
06-07-2003, 04:49 PM
--Why would you want to? Tcpd wrapping results in better security. Are you trying to run ftp over UDP or something?

--Also, you really should be using ssh instead of telnet (ssh -2 -c blowfish is the fastest.)

--Check out this Google cache "What inetd is and how to secure it":
http://216.239.33.100/search?q=cache:rfG2iTsH-xQJ:www.sans.org/rr/unix/inetd.php+using+ftp+over+udp+instead+of+tcpd&hl=en&ie=UTF-8

--Also check here, it shows you how to run a standalone service:
http://www.linuxman.com.cy/rute/node32.html


Thanks for the info. I've found out the answer, it seems like I've just forgotten to add the last field on both of the lines, they must look like that:



ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd
telnet stream tcp nowait root /usr/sbin/in.telnetd in.telnetd


Of course I know this a Bad Thing ;-) This was just about a demonstration and I needed to show people how inetd worked without tcpd.