xref: /freebsd/usr.sbin/inetd/inetd.conf (revision 734e82fe33aa764367791a7d603b383996c6b40b)
1#
2# Internet server configuration database
3#
4# Define *both* IPv4 and IPv6 entries for dual-stack support.
5# To disable a service, comment it out by prefixing the line with '#'.
6# To enable a service, remove the '#' at the beginning of the line.
7#
8#ftp	stream	tcp	nowait	root	/usr/libexec/ftpd	ftpd -l
9#ftp	stream	tcp6	nowait	root	/usr/libexec/ftpd	ftpd -l
10#ssh	stream	tcp	nowait	root	/usr/sbin/sshd		sshd -i -4
11#ssh	stream	tcp6	nowait	root	/usr/sbin/sshd		sshd -i -6
12#telnet	stream	tcp	nowait	root	/usr/local/libexec/telnetd	telnetd
13#telnet	stream	tcp6	nowait	root	/usr/local/libexec/telnetd	telnetd
14#shell	stream	tcp	nowait	root	/usr/local/sbin/rshd	rshd
15#shell	stream	tcp6	nowait	root	/usr/local/sbin/rshd	rshd
16#login	stream	tcp	nowait	root	/usr/local/sbin/rlogind	rlogind
17#login	stream	tcp6	nowait	root	/usr/local/sbin/rlogind	rlogind
18#finger	stream	tcp	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -k -s
19#finger	stream	tcp6	nowait/3/10 nobody /usr/libexec/fingerd	fingerd -k -s
20#
21# run comsat as root to be able to print partial mailbox contents w/ biff,
22# or use the safer tty:tty to just print that new mail has been received.
23#comsat	dgram	udp	wait	tty:tty	/usr/libexec/comsat	comsat
24#
25# ntalk is required for the 'talk' utility to work correctly
26#ntalk	dgram	udp	wait	tty:tty	/usr/libexec/ntalkd	ntalkd
27#tftp	dgram	udp	wait	root	/usr/libexec/tftpd	tftpd -l -s /tftpboot
28#tftp	dgram	udp6	wait	root	/usr/libexec/tftpd	tftpd -l -s /tftpboot
29#bootps	dgram	udp	wait	root	/usr/libexec/bootpd	bootpd
30#
31# "Small servers" -- used to be standard on, but we're more conservative
32# about things due to Internet security concerns.  Only turn on what you
33# need.
34#
35#daytime stream	tcp	nowait	root	internal
36#daytime stream	tcp6	nowait	root	internal
37#daytime dgram	udp	wait	root	internal
38#daytime dgram	udp6	wait	root	internal
39#time	stream	tcp	nowait	root	internal
40#time	stream	tcp6	nowait	root	internal
41#time	 dgram	udp	wait	root	internal
42#time	 dgram	udp6	wait	root	internal
43#echo	stream	tcp	nowait	root	internal
44#echo	stream	tcp6	nowait	root	internal
45#echo	dgram	udp	wait	root	internal
46#echo	dgram	udp6	wait	root	internal
47#discard stream	tcp	nowait	root	internal
48#discard stream	tcp6	nowait	root	internal
49#discard dgram	udp	wait	root	internal
50#discard dgram	udp6	wait	root	internal
51#chargen stream	tcp	nowait	root	internal
52#chargen stream	tcp6	nowait	root	internal
53#chargen dgram	udp	wait	root	internal
54#chargen dgram	udp6	wait	root	internal
55#
56# CVS servers - for master CVS repositories only!  You must set the
57# --allow-root path correctly or you open a trivial to exploit but
58# deadly security hole.
59#
60#cvspserver	stream	tcp	nowait	root	/usr/local/bin/cvs	cvs --allow-root=/your/cvsroot/here pserver
61#cvspserver	stream	tcp	nowait	root	/usr/local/bin/cvs	cvs --allow-root=/your/cvsroot/here kserver
62#
63# RPC based services (you MUST have rpcbind running to use these)
64#
65#rstatd/1-3	dgram rpc/udp wait root	/usr/libexec/rpc.rstatd	 rpc.rstatd
66#rusersd/1-2	dgram rpc/udp wait root	/usr/libexec/rpc.rusersd rpc.rusersd
67#walld/1	dgram rpc/udp wait root	/usr/libexec/rpc.rwalld	 rpc.rwalld
68#rquotad/1	dgram rpc/udp wait root	/usr/libexec/rpc.rquotad rpc.rquotad
69#rquotad/1	dgram rpc/udp6 wait root	/usr/libexec/rpc.rquotad rpc.rquotad
70#sprayd/1	dgram rpc/udp wait root	/usr/libexec/rpc.sprayd	 rpc.sprayd
71#
72# example entry for the optional imap4 server
73#
74#imap4	stream	tcp	nowait	root	/usr/local/libexec/imapd	imapd
75#
76# example entry for the optional nntp server
77#
78#nntp	stream	tcp	nowait	news	/usr/local/libexec/nntpd	nntpd
79#
80# example entry for the optional uucpd server
81#
82#uucpd	stream	tcp	nowait	root	/usr/local/libexec/uucpd	uucpd
83#
84# Return error for all "ident" requests
85#
86#auth	stream	tcp	nowait	root	internal
87#auth	stream	tcp6	nowait	root	internal
88#
89# Provide internally a real "ident" service which provides ~/.fakeid support,
90# provides ~/.noident support, reports UNKNOWN as the operating system type
91# and times out after 30 seconds.
92#
93#auth	stream	tcp	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
94#auth	stream	tcp6	nowait	root	internal	auth -r -f -n -o UNKNOWN -t 30
95#
96# Example entry for an external ident server
97#
98#auth	stream	tcp	wait	root	/usr/local/sbin/identd	identd -w -t120
99#
100# Example entry for the optional qmail MTA
101#  NOTE: This is no longer the correct way to handle incoming SMTP
102#        connections for qmail.  Use tcpserver (http://cr.yp.to/ucspi-tcp.html)
103#        instead.
104#
105#smtp	stream	tcp	nowait	qmaild	/var/qmail/bin/tcp-env	tcp-env /var/qmail/bin/qmail-smtpd
106#
107# Example entry for Samba sharing for the SMB protocol
108#
109# Enable the first two entries to enable Samba startup from inetd (according to
110# the Samba documentation). Enable the third entry only if you have other
111# NetBIOS daemons listening on your network. Enable the fourth entry to use
112# the swat Samba configuration tool.
113#netbios-ssn	stream	tcp	nowait	root	/usr/local/sbin/smbd	smbd
114#microsoft-ds	stream	tcp	nowait	root	/usr/local/sbin/smbd	smbd
115#netbios-ns	dgram	udp	wait	root	/usr/local/sbin/nmbd	nmbd
116#swat	stream	tcp	nowait/400	root	/usr/local/sbin/swat	swat
117#
118# Example entry for the Prometheus sysctl metrics exporter
119#
120#prom-sysctl	stream	tcp	nowait	nobody	/usr/sbin/prometheus_sysctl_exporter	prometheus_sysctl_exporter -dgh
121#
122# Example entry for the CTL exporter
123#prom-ctl       stream  tcp     nowait  root /usr/bin/ctlstat ctlstat -P
124#
125# Example entry for insecure rsync server
126# This is best combined with encrypted virtual tunnel interfaces, which can be
127# found with: apropos if_ | grep tunnel
128#rsync	stream	tcp	nowait	root	/usr/local/bin/rsyncd	rsyncd --daemon
129#
130# Let the system respond to date requests via tcpmux
131#tcpmux/+date	stream	tcp	nowait	guest	/bin/date	date
132#
133# Let people access the system phonebook via tcpmux
134#tcpmux/phonebook	stream	tcp	nowait	guest	/usr/local/bin/phonebook	phonebook
135#
136# Make kernel statistics accessible
137#rstatd/1-3	dgram	rpc/udp	wait	root	/usr/libexec/rpc.rstatd	rpc.rstatd
138#
139# Use netcat as a one-shot HTTP proxy with nc (from freebsd-tips fortune)
140#http	stream	tcp	nowait	nobody	/usr/bin/nc	nc -N dest-ip 80
141#
142# Set up a unix socket at /var/run/echo that echo's back whatever is written to it.
143#/var/run/echo	stream	unix	nowait	root	internal
144#
145# Run chargen for IPsec Authentication Headers
146#@ ipsec ah/require
147#chargen	stream	tcp	nowait	root	internal
148#@
149