inetd.conf revision 81020
1139823Simp# $FreeBSD: head/etc/inetd.conf 81020 2001-08-02 02:19:56Z rwatson $
21541Srgrimes#
31541Srgrimes# Internet server configuration database
41541Srgrimes#
51541Srgrimes# Define *both* IPv4 and IPv6 entries for dual-stack support.
61541Srgrimes# To disable a service, comment it out by prefixing the line with '#'.
71541Srgrimes# To enable a service, remove the '#' at the beginning of the line.
81541Srgrimes#
91541Srgrimes#ftp	stream	tcp	nowait	root	/usr/libexec/ftpd	ftpd -l
101541Srgrimes#ftp	stream	tcp6	nowait	root	/usr/libexec/ftpd	ftpd -l
111541Srgrimes#telnet	stream	tcp	nowait	root	/usr/libexec/telnetd	telnetd
121541Srgrimes#telnet	stream	tcp6	nowait	root	/usr/libexec/telnetd	telnetd
131541Srgrimes#shell	stream	tcp	nowait	root	/usr/libexec/rshd	rshd
141541Srgrimes#shell	stream	tcp6	nowait	root	/usr/libexec/rshd	rshd
151541Srgrimes#login	stream	tcp	nowait	root	/usr/libexec/rlogind	rlogind
161541Srgrimes#login	stream	tcp6	nowait	root	/usr/libexec/rlogind	rlogind
171541Srgrimes#finger	stream	tcp	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -s
181541Srgrimes#finger	stream	tcp6	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -s
191541Srgrimes#exec	stream	tcp	nowait	root	/usr/libexec/rexecd	rexecd
201541Srgrimes#uucpd	stream	tcp	nowait	root	/usr/libexec/uucpd	uucpd
211541Srgrimes#nntp	stream	tcp	nowait	usenet	/usr/libexec/nntpd	nntpd
221541Srgrimes#
231541Srgrimes# run comsat as root to be able to print partial mailbox contents w/ biff,
241541Srgrimes# or use the safer tty:tty to just print that new mail has been received.
251541Srgrimes#comsat	dgram	udp	wait	tty:tty	/usr/libexec/comsat	comsat
261541Srgrimes#
271541Srgrimes# ntalk is required for the 'talk' utility to work correctly
281541Srgrimes#ntalk	dgram	udp	wait	tty:tty	/usr/libexec/ntalkd	ntalkd
29108270Sru#tftp	dgram	udp	wait	nobody	/usr/libexec/tftpd	tftpd /tftpboot
3050477Speter#bootps	dgram	udp	wait	root	/usr/libexec/bootpd	bootpd
311541Srgrimes#
32178888Sjulian# "Small servers" -- used to be standard on, but we're more conservative
33178888Sjulian# about things due to Internet security concerns.  Only turn on what you
34178888Sjulian# need.
35178888Sjulian#
361541Srgrimes#daytime stream	tcp	nowait	root	internal
3732350Seivind#daytime stream	tcp6	nowait	root	internal
38178888Sjulian#daytime dgram	udp	wait	root	internal
3914328Speter#daytime dgram	udp6	wait	root	internal
40178167Sqingli#time	stream	tcp	nowait	root	internal
4114328Speter#time	stream	tcp6	nowait	root	internal
421541Srgrimes#time	 dgram	udp	wait	root	internal
431541Srgrimes#time	 dgram	udp6	wait	root	internal
44186119Sqingli#echo	stream	tcp	nowait	root	internal
4529024Sbde#echo	dgram	udp6	wait	root	internal
461541Srgrimes#echo	dgram	udp	wait	root	internal
471541Srgrimes#echo	stream	tcp6	nowait	root	internal
48178888Sjulian#discard stream	tcp	nowait	root	internal
49185747Skmacy#discard stream	tcp6	nowait	root	internal
50178888Sjulian#discard dgram	udp	wait	root	internal
51178888Sjulian#discard dgram	udp6	wait	root	internal
521541Srgrimes#chargen stream	tcp	nowait	root	internal
5346161Sluoqi#chargen stream	tcp6	nowait	root	internal
541541Srgrimes#chargen dgram	udp	wait	root	internal
551541Srgrimes#chargen dgram	udp6	wait	root	internal
56186119Sqingli#
571541Srgrimes# Kerberos authenticated services
58196019Srwatson#
59197687Sqingli#klogin	stream	tcp	nowait	root	/usr/libexec/rlogind	rlogind -k
601541Srgrimes#eklogin stream	tcp	nowait	root	/usr/libexec/rlogind	rlogind -k -x
61178167Sqingli#kshell	stream	tcp	nowait	root	/usr/libexec/rshd	rshd -k
62178167Sqingli#kip	stream	tcp	nowait	root	/usr/libexec/kipd	kipd
63178167Sqingli#
64178167Sqingli# CVS servers - for master CVS repositories only!  You must set the
651541Srgrimes# --allow-root path correctly or you open a trivial to exploit but
667090Sbde# deadly security hole.
671541Srgrimes#
68133513Sandre#cvspserver	stream	tcp	nowait	root	/usr/bin/cvs	cvs --allow-root=/your/cvsroot/here pserver
69133513Sandre#cvs		stream	tcp	nowait	root	/usr/bin/cvs	cvs --allow-root=/your/cvsroot/here kserver
70178888Sjulian#
71217322Smdf# RPC based services (you MUST have portmapper running to use these)
72180840Sjulian#
73180840Sjulian#rstatd/1-3	dgram rpc/udp wait root	/usr/libexec/rpc.rstatd	 rpc.rstatd
74180840Sjulian#rusersd/1-2	dgram rpc/udp wait root	/usr/libexec/rpc.rusersd rpc.rusersd
75180840Sjulian#walld/1	dgram rpc/udp wait root	/usr/libexec/rpc.rwalld	 rpc.rwalld
76180840Sjulian#pcnfsd/1-2	dgram rpc/udp wait root	/usr/libexec/rpc.pcnfsd	 rpc.pcnfsd	
77178888Sjulian#rquotad/1	dgram rpc/udp wait root	/usr/libexec/rpc.rquotad rpc.rquotad
78178888Sjulian#sprayd/1	dgram rpc/udp wait root	/usr/libexec/rpc.sprayd	 rpc.sprayd
79180840Sjulian#
80180840Sjulian# example entry for the optional pop3 server
81180840Sjulian#
82180840Sjulian#pop3	stream	tcp	nowait	root	/usr/local/libexec/popper	popper
83180840Sjulian#
84180840Sjulian# example entry for the optional imap4 server
85180840Sjulian#
86180840Sjulian#imap4	stream	tcp	nowait	root	/usr/local/libexec/imapd	imapd
87217322Smdf#
88180840Sjulian# Return error for all "ident" requests
89180840Sjulian#
90180840Sjulian#auth	stream	tcp	nowait	root	internal
91195699Srwatson#auth	stream	tcp6	nowait	root	internal
92207369Sbz#
931541Srgrimes# Provide internally a real "ident" service which provides ~/.fakeid support,
94207369Sbz# provides ~/.noident support, reports UNKNOWN as the operating system type
95195727Srwatson# and times out after 30 seconds.
96207369Sbz#
97207369Sbz#auth	stream	tcp	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
98195727Srwatson#auth	stream	tcp6	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
99194640Sbz#
10012820Sphk# Example entry for an external ident server
101128524Sluigi#
102128524Sluigi#auth	stream	tcp	wait	root	/usr/local/sbin/identd	identd -w -t120
103128524Sluigi#
104128524Sluigi# Example entry for the optional qmail MTA
105128524Sluigi#  NOTE: This is no longer the correct way to handle incoming SMTP
106128524Sluigi#        connections for qmail.  Use tcpserver (http://cr.yp.to/ucspi-tcp.html)
107128524Sluigi#        instead.
108128524Sluigi#
109128524Sluigi#smtp	stream	tcp	nowait	qmaild	/var/qmail/bin/tcp-env	tcp-env /var/qmail/bin/qmail-smtpd
110128524Sluigi#
111128524Sluigi# Enable the following two entries to enable samba startup from inetd
112128524Sluigi# (from the Samba documentation).
113128524Sluigi#
114128524Sluigi#netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd 
115128524Sluigi#netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd 
116215701Sdim