Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Scaricare il pdf (Pagina 125)

Chapter 9. TCP Wrappers and xinetd 125

9.3.1. xinetd Conﬁguration Files

The xinet service is controlled by the /etc/xinetd.conf ﬁle, as well as the various service-

speciﬁc ﬁles in the /etc/xinetd.d directory.

9.3.1.1. /etc/xinetd.conf

The xinetd.conf ﬁle is the parent of all xinetd-controlled service conﬁguration ﬁles, as the

service-speciﬁc ﬁles are also parsed every time xinetd starts. By default, xinetd.conf contains

some basic conﬁguration settings that apply to every service:

defaults

{

instances = 60

log_type = SYSLOG authpriv

log_on_success = HOST PID

log_on_failure = HOST

}

includedir /etc/xinetd.d

These lines control various aspects of how xinetd does its job:

• instances — Sets the maximum number of requests a particular service can handle at once.

• log_type — Tells xinetd to use the authpriv log, speciﬁed in /etc/syslog.conf

and set to /var/log/secure by default, rather than using another speciﬁc ﬁle. Using

FILE /var/log/xinetdlog here instead would move xinetd logging to a separate

/var/log/xinetdlog ﬁle.

• log_on_success — Lets xinetd know what to log if the connection is successful. By default,

the remote host’s IP address and the process ID of server processing the request are recorded.

• log_on_failure — Tells xinetd what to log if the connection fails or is not allowed. The

log_on_success and log_on_failure settings in /etc/xinetd.conf are often added to by

each of the different services, meaning that successful and failed connections by each service will

usually log more than what is indicated here.

Various logging options are available for use in /etc/xinetd.conf and the service-speciﬁc xinetd

conﬁguration ﬁles:

• ATTEMPT — Logs the fact that a failed attempt was made. (log_on_failure)

• DURATION — Logs the length of time the service is used by a remote system. (log_on_success)

• EXIT — Logs the exit status or termination signal of the service. (log_on_success)

• HOST — Logs the remote host’s IP address. (log_on_failure and log_on_success)

• PID — Logs the process ID of the server receiving the request. (log_on_success)

• RECORD — Records information about the remote system in the case the service cannot be started.

Only particular services, such as login and finger, may use this option. (log_on_failure)

• USERID — Logs the remote user using the method deﬁned in RFC 1413 for all multi-threaded

stream services. (log_on_failure and log_on_success)

Other options for /etc/xinetd.conf are available, such as per_source, which limits the maxi-

mum number of connections from a particular IP address to a speciﬁc service.

1 2 ... 120 121 122 123 124 125 126 127 128 129 130 ... 281 282

Nessun commento

Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Pagina 125