HP-UX Internet Services Administrator's Guide (May 2010)

Table 5-3 Servers Required for Each Service (continued)

LISTENtelnet*.telnet

LISTENrlogin*.login

LISTENremsh, rcp*.shell

LISTENrexec library*.exec

rwho, ruptime*.who

LISTENsendmail SMTP*.smtp

LISTENtftp*.tftp

LISTENbootpd*.bootps

LISTENfingerd*.finger

UDP-based protocols are datagram driven, so they do not show a TCP LISTEN status.

1C. Server exists for service? If the server does not exist for the requested service,

continue with 1D to determine why. If the server does exist for the server,

continue with 1C1.

1C1. Go to Flowchart 2. Go to the next flowchart to begin troubleshooting the security

of the Internet Services.

1D. Are files correct? Is there an entry for the servers or services in the

/etc/inetd.conf or /etc/services files?

Table 5-4 lists the entries that are required in the /etc/inetd.conf file.

Table 5-4 Entries Required in /etc/inetd.conf

inetd.conf Entry

Service Requested

ftp stream tcp nowait root /usr/lbin/ftpd ftpdftp

telnet stream tcp nowait root /usr/lbin/telnetd telnetdtelnet

shell stream tcp nowait root /usr/lbin/remshd remshdremsh, rcp

exec stream tcp nowait root /usr/lbin/rexecd rexecdrexeclibrary

tftp dgram udp nowait root /usr/lbin/tftpd tftpdtftp

bootps dgram udp wait root /usr/lbin/bootpd bootpdbootpd

finger stream tcp nowait bin /usr/lbin/fingerd fingerdfingerd

Check the permissions on the files in the /usr/lbin and /usr/sbin directories.

The files ftpd, bootpd, telnetd, rlogind, remshd, rexecd, rwhod, and inetd

82 Troubleshooting Internet Services