HP-UX HB v13.00 Ch-10 - Network Services

HP-UX Handbook – Rev 13.00 Page 11 (of 26)
Chapter 10 Network Services
October 29, 2013
Some security is provided in HP-UX via /var/adm/inetd.sec:
service_name { allow | deny } { hostaddrs | hostnames | netaddrs | netnames
}
example (only allow loopback telnet connections)
telnet allow 127.0.0.1
This file applies only to services launched out of inetd (as defined in /etc/inetd.conf), it is not a
general security mechanism.
man inetd.conf shows the syntax of the file. Lines starting with“#” are comments. inetd also
requires information from /etc/services and /etc/protocols or corresponding NIS-maps
(see man nsswitch.conf) to determine a service and its corresponding port.
Recommended inetd usage:
Changes to the /etc/inetd.conf file are only activated after executing
# inetd -c (or after restarting the inetd process)
Toggle on/off connection logging of inetd services to /var/adm/syslog/syslog.log.
# inetd -l
Turning on/of debugging of the inetd (undocumented feature)
# inetd -b
Stopping the inetd process. Do not use kill -9
# inetd -k
For details on the services started by inetd (example telnetd) refer to their corresponding man
pages.
NFS
Basic Functionality
When a client system mounts a filesystem via NFS the following happens:
 The client system generates an RPC request to see if and on which port on the server
system a mount daemon (rpc.mountd) is reachable (request to the portmapper on
port 111).