Red Hat NETSCAPE MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Guida di Installazione Scaricare il pdf (Pagina 34)

editor. If using xdm (or variants such as gdm, kdm, etc), this option would be specified in

/etc/X11/xdm/Xservers (or comparable) as :0 local /usr/bin/X11/X −nolisten tcp.

gdm actually uses /etc/X11/gdm/gdm.conf.

If using xdm (or comparable) to start X automatically at boot, /etc/inittab can be modified as:

xdm −udpPort 0, to further restrict connections. This is typically near the bottom of

/etc/inittab.

Recent versions of sendmail can be told to listen only on specified addresses: •

# SMTP daemon options

O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA

The above excerpt is from /etc/sendmail.cf which can be carefully added with your text

editor. The sendmail.mc directive is:

dnl This changes sendmail to only listen on the loopback device 127.0.0.1

dnl and not on any other network devices.

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

In case you would prefer to build a new sendmail.cf, rather than edit the existing one. Other mail

server daemons likely have similar configuration options. Check your local documentation. As of

Red Hat 7.1, sendmail has compiled in support for tcpwrappers as well.

SAMBA connections can be restricted in smb.conf: •

bind interfaces = true

interfaces = 192.168.1. 127.

hosts allow = 192.168.1. 127.

This will only open, and allow, connections from localhost (127.0.0.1), and the local LAN address

range. Adjust the LAN address as needed.

The CUPS print daemon can be told where to listen for connections. Add to

/etc/cups/cupsd.conf:

•

Listen 192.168.1.1:631

This will only open a port at the specified address and port number.

xinetd can force daemons to listen only on a specified address with its "bind" configuration directive.

For instance, an internal LAN interface address. See man xinetd.conf for this and other syntax.

There are various other control mechanisms as well.

•

Security Quick−Start HOWTO for Red Hat Linux

5.6. Individual Applications 31

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 81 82

Nessun commento

Red Hat NETSCAPE MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Guida di Installazione Pagina 34