kazulog@sv1:~$ for f in /etc/inetd.conf /etc/hosts.deny; do echo "===== $f"; sudo cat "$f" 2>/dev/null; done ===== /etc/inetd.conf # /etc/inetd.conf: see inetd(8) for further informations. # # Internet superserver configuration database. # # # Lines starting with "#:LABEL:" or "##" should not # be changed unless you know what you are doing! # # If you want to disable an entry so it is not touched during # package updates just comment it out with a single '#' character. # # Packages should modify this file by using update-inetd(8). # # # #:INTERNAL: Internal services #discard stream tcp6 nowait root internal #discard dgram udp6 wait root internal #daytime stream tcp6 nowait root internal #time stream tcp6 nowait root internal #:STANDARD: These are standard services. ## telnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/telnetd #:BSD: Shell, login, exec and talk are BSD protocols. #:MAIL: Mail, news and uucp services. #:INFO: Info services #:BOOT: TFTP service is provided primarily for booting. Most sites # run this only on machines acting as "boot servers." #:RPC: RPC based services #:HAM-RADIO: amateur-radio services #:OTHER: Other services ===== /etc/hosts.deny # /etc/hosts.deny: list of hosts that are _not_ allowed to access the system. # See the manual pages hosts_access(5) and hosts_options(5). # # Example: ALL: some.host.name, .some.domain # ALL EXCEPT in.fingerd: other.host.name, .other.domain # # If you're going to protect the portmapper use the name "rpcbind" for the # daemon name. See rpcbind(8) and rpc.mountd(8) for further information. # # The PARANOID wildcard matches any host whose name does not match its # address. # # You may wish to enable this to ensure any programs that don't # validate looked up hostnames still leave understandable logs. In past # versions of Debian this has been the default. # ALL: PARANOID