On Monday 14 August 2006 00:52, Lengyel, Florian wrote:
>Pardon me: identd, not inetd. It wasn't a typo.
>I know about inetd and xinetd. I was disappointed to see
>that the debian hosts use inetd instead of xinetd.
>
My bad, I actually missread it.  Sorry.

So was I, even more disappointed to see that ubuntu apparently isn't using 
either, virtually everything is controlled from /etc/init.d in a kubuntu 
install I just did on my cnc machine.  On that box the only line in 
inetd.conf starts with disabled, and only 4 files live in 
the /etc/xinetd.d directory.

identd could have some bearing on it I suppose, but having an identd, given 
that its used rather extensively as a verfication mechanism by using it as 
proof there is a machine at that address even if the port response 
indicates its closed is pretty universal.  Here, I've got a pretty tight 
router and firewall setup, and the only response from my outside address 
when being scanned with nmap, is from a closed identd port thats actually 
located in the router.  If I actually shut that response off, then I can't 
access half the web sites on the net.

I think I'd start an identd daemon just for effects on that machine.  It 
might not help, but it might not hurt either.

[...]

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Yahoo.com and AOL/TW attorneys please note, additions to the above
message by Gene Heskett are:
Copyright 2006 by Maurice Eugene Heskett, all rights reserved.