[6379] in RedHat Linux List
Re: Inetd: security questions.
daemon@ATHENA.MIT.EDU (Jeremy)
Wed Nov 27 02:29:51 1996
To: redhat-list@redhat.com
cc: heffner@medinah.televiso.com
In-reply-to: Your message of "Tue, 26 Nov 1996 21:50:17 PST."
<329BD699.4E860108@iceonline.com>
Date: Wed, 27 Nov 1996 00:27:00 -0700
From: Jeremy <heffner@medinah.televiso.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
In message <329BD699.4E860108@iceonline.com>Borg mumbled
>Hi,
>
>When I visit some www sites and connect to certain hosts,
>soimetimes I get something like that in my /var/log/messages:
>
>Nov 26 20:23:32 borg identd[7049]: Connection from somehost.com
>Nov 26 20:23:32 borg identd[7049]: Successful lookup: 1257 , 23 : vlad
>
>(sometimes it's a different port such as 80 but it always
>says "Succesful lookup: blah blah : vlad)
>
>What does it mean and what are they trying to do? How do I
>disable that "feature" letting others look at my user name?
>They are not doing it through finger or smtp because there's
>nothing in /var/log/secure!
identd provides the protocol which is RFC 1413 compliant. What identd do
is what the name says it IDENTifies someone on a given port. Why? So that
when you telnet to MY computer, I know what your computer calls itself
(ask the computer, not use reslov) and who the computer says is connecting
to me. This for for MY security (I'm saying my in an ethereal sort of
why, not ME in particular) so I have more information, remmebering that we
arm ourselves with information. How to disable? Look for a line like this
in /etc/inetd.conf:
auth stream tcp wait root /usr/sbin/tcpd in.identd -w -t120
and comment it out like this:
# auth stream tcp wait root /usr/sbin/tcpd in.identd -w -t120
and then SIGHUP identd
sudo kill -HUP `cat /var/run/inetd.conf`
or just
kill -HUP `cat /var/run/inetd.conf`
if you dont use sudo
For more information on identd and its uses, RTFM, its RFC #1413
hope that helps..
-jeremy
-------------------------------------------------------------------------
Jeremy Heffner | Televiso.com System Administration
Finger for PGP public-key | My thoughts, my brains, noone else's
-------------------------------------------------------------------------
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
