xref: /dragonfly/etc/inetd.conf (revision ce0e08e2)
1# $FreeBSD: src/etc/inetd.conf,v 1.44.2.17 2003/06/13 10:43:19 yar Exp $
2# $DragonFly: src/etc/inetd.conf,v 1.5 2008/07/06 23:50:19 thomas Exp $
3#
4# Internet server configuration database
5#
6# Define *both* IPv4 and IPv6 entries for dual-stack support.
7# To disable a service, comment it out by prefixing the line with '#'.
8# To enable a service, remove the '#' at the beginning of the line.
9#
10#ftp	stream	tcp	nowait	root	/usr/libexec/ftpd	ftpd -l
11#ftp	stream	tcp6	nowait	root	/usr/libexec/ftpd	ftpd -l
12#ssh	stream	tcp	nowait	root	/usr/sbin/sshd		sshd -i -4
13#ssh	stream	tcp6	nowait	root	/usr/sbin/sshd		sshd -i -6
14#telnet	stream	tcp	nowait	root	/usr/libexec/telnetd	telnetd
15#telnet	stream	tcp6	nowait	root	/usr/libexec/telnetd	telnetd
16#shell	stream	tcp	nowait	root	/usr/libexec/rshd	rshd
17#shell	stream	tcp6	nowait	root	/usr/libexec/rshd	rshd
18#login	stream	tcp	nowait	root	/usr/libexec/rlogind	rlogind
19#login	stream	tcp6	nowait	root	/usr/libexec/rlogind	rlogind
20#finger	stream	tcp	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -s
21#finger	stream	tcp6	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -s
22#exec	stream	tcp	nowait	root	/usr/libexec/rexecd	rexecd
23#
24# run comsat as root to be able to print partial mailbox contents w/ biff,
25# or use the safer tty:tty to just print that new mail has been received.
26#comsat	dgram	udp	wait	tty:tty	/usr/libexec/comsat	comsat
27#
28# ntalk is required for the 'talk' utility to work correctly
29#ntalk	dgram	udp	wait	tty:tty	/usr/libexec/ntalkd	ntalkd
30#tftp	dgram	udp	wait	root	/usr/libexec/tftpd	tftpd -s /tftpboot
31#tftp	dgram	udp6	wait	root	/usr/libexec/tftpd	tftpd -s /tftpboot
32#bootps	dgram	udp	wait	root	/usr/libexec/bootpd	bootpd
33#
34# "Small servers" -- used to be standard on, but we're more conservative
35# about things due to Internet security concerns.  Only turn on what you
36# need.
37#
38#daytime stream	tcp	nowait	root	internal
39#daytime stream	tcp6	nowait	root	internal
40#daytime dgram	udp	wait	root	internal
41#daytime dgram	udp6	wait	root	internal
42#time	stream	tcp	nowait	root	internal
43#time	stream	tcp6	nowait	root	internal
44#time	 dgram	udp	wait	root	internal
45#time	 dgram	udp6	wait	root	internal
46#echo	stream	tcp	nowait	root	internal
47#echo	stream	tcp6	nowait	root	internal
48#echo	dgram	udp	wait	root	internal
49#echo	dgram	udp6	wait	root	internal
50#discard stream	tcp	nowait	root	internal
51#discard stream	tcp6	nowait	root	internal
52#discard dgram	udp	wait	root	internal
53#discard dgram	udp6	wait	root	internal
54#chargen stream	tcp	nowait	root	internal
55#chargen stream	tcp6	nowait	root	internal
56#chargen dgram	udp	wait	root	internal
57#chargen dgram	udp6	wait	root	internal
58#
59# CVS servers - for master CVS repositories only!  You must set the
60# --allow-root path correctly or you open a trivial to exploit but
61# deadly security hole.
62#
63#cvspserver	stream	tcp	nowait	root	/usr/bin/cvs	cvs --allow-root=/your/cvsroot/here pserver
64#cvspserver	stream	tcp	nowait	root	/usr/bin/cvs	cvs --allow-root=/your/cvsroot/here kserver
65#
66# RPC based services (you MUST have portmapper running to use these)
67#
68#rstatd/1-3	dgram rpc/udp wait root	/usr/libexec/rpc.rstatd	 rpc.rstatd
69#rusersd/1-2	dgram rpc/udp wait root	/usr/libexec/rpc.rusersd rpc.rusersd
70#walld/1	dgram rpc/udp wait root	/usr/libexec/rpc.rwalld	 rpc.rwalld
71#rquotad/1	dgram rpc/udp wait root	/usr/libexec/rpc.rquotad rpc.rquotad
72#sprayd/1	dgram rpc/udp wait root	/usr/libexec/rpc.sprayd	 rpc.sprayd
73#
74# example entry for the optional pop3 server
75#
76#pop3	stream	tcp	nowait	root	/usr/pkg/libexec/popper	popper
77#
78# example entry for the optional imap4 server
79#
80#imap4	stream	tcp	nowait	root	/usr/pkg/libexec/imapd	imapd
81#
82# example entry for the optional nntp server
83#
84#nntp	stream	tcp	nowait	news	/usr/pkg/libexec/nntpd	nntpd
85#
86# Return error for all "ident" requests
87#
88#auth	stream	tcp	nowait	root	internal
89#auth	stream	tcp6	nowait	root	internal
90#
91# Provide internally a real "ident" service which provides ~/.fakeid support,
92# provides ~/.noident support, reports UNKNOWN as the operating system type
93# and times out after 30 seconds.
94#
95#auth	stream	tcp	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
96#auth	stream	tcp6	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
97#
98# Example entry for an external ident server
99#
100#auth	stream	tcp	wait	root	/usr/pkg/sbin/identd	identd -w -t120
101#
102# Example entry for the optional qmail MTA
103#  NOTE: This is no longer the correct way to handle incoming SMTP
104#        connections for qmail.  Use tcpserver (http://cr.yp.to/ucspi-tcp.html)
105#        instead.
106#
107#smtp	stream	tcp	nowait	qmaild	/var/qmail/bin/tcp-env	tcp-env /var/qmail/bin/qmail-smtpd
108#
109# Enable the following two entries to enable samba startup from inetd
110# (from the Samba documentation).  Enable the third entry to enable the swat
111# samba configuration tool.
112#
113#netbios-ssn stream tcp	nowait		root	/usr/pkg/sbin/smbd	smbd
114#netbios-ns dgram udp	wait		root	/usr/pkg/sbin/nmbd	nmbd
115#swat	stream	tcp	nowait/400	root	/usr/pkg/sbin/swat	swat
116#
117# Enable the following entry to enable ftp-proxy to NAT ftp sessions with pf
118# N.B.: inetd binds to * in the default installation so you should add
119#	an appropriate block rule to your pf.conf
120#
121#ftp-proxy	stream	tcp	nowait	root	/usr/libexec/ftp-proxy	ftp-proxy
122