Korea FreeBSD Users Group News, Internal, Projects, Home
Software, Support, Documentation

Re: ³×Æ®¿÷ ¼³Á¤



[ ³¯Â¥¼ø »öÀÎ ] [ ´ñ±Û¼ø »öÀÎ ] [ ÃÖ»óÀ§ »öÀÎ]

[ÀÌÀü ±Û] [´ÙÀ½ ±Û] [ÀÌÀü ´ñ±Û] [´ÙÀ½ ´ñ±Û]



FreeBSD 4.4-RELEASE´Â ±âº» ¼³Á¤¿¡¼­ ÅÚ·¿ ¼­ºñ½º¸¦ ºñ·ÔÇÑ ¸ðµç ¼­ºñ½º°¡
±âº»ÀûÀ¸·Î ºñȰ¼ºÈ­ µÇ¾î ÀÖ½À´Ï´Ù.

/etc/inetd.conf ÆÄÀÏÀ» ÆíÁýÇÑ ÈÄ inetd¸¦ Àç½ÇÇà ÇϽñ⠹ٶø´Ï´Ù.


´ÙÀ½Àº /etc/inetd.conf ÆÄÀÏÀÇ CVS Revision 1.49, 1.44.2.5¿¡ °üÇÑ ³»¿ëÀÔ´Ï´Ù.
(4.4-RELEASE¿¡ Æ÷ÇÔµÈ /etc/inetd.conf ÆÄÀÏÀÇ Revision ¹øÈ£´Â
1.44.2.5ÀÔ´Ï´Ù.)

Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable



----- Original Message -----
From: "Á¶°­·¡" <pulsar@kornet.net>
To: <questions@kr.freebsd.org>
Sent: Friday, November 02, 2001 6:17 PM
Subject: ³×Æ®¿÷ ¼³Á¤


> ÇÁºñ 4.4rÀ» ¼³Ä¡Çϰí ÇÁºñ·Î ÅÚ³ÝÁ¢¼ÓÀÌ µÇÁö¾Ê½À´Ï´Ù. Ŭ¶óÀÌ¾ðÆ®¿Í ¼­·ÎÀÇ
ip·Î ÇÎÀº Àߵ˴ϴÙ. ¿Ö±×·²±î¿ä?

--
To Unsubscribe: send mail to majordomo@kr.FreeBSD.org
with "unsubscribe questions" in the BODY of the message



[ ³¯Â¥¼ø »öÀÎ ] [ ´ñ±Û¼ø »öÀÎ ] [ ÃÖ»óÀ§ »öÀÎ]

Copyright © 1998-2005 Korea FreeBSD Users Group.
All rights reserved. webmaster at kr.FreeBSD.org
$Date: 2002/03/26 13:37:13 $
Powered by FreeBSD