What is xinetd superserver

In this case, the attribute is set to HOST, which means that if xinetd cannot start a service such as Telnet, it logs the name of the remote host that requested the service. If this limit is reached, the service is turned off for 30 seconds. Placing a limit such as this protects your system against denial of service attacks that attempts to overwhelm the system by requesting too many connections.

Each file specifies the attributes for one service. As this listing shows, there are more than two dozen services that xinetd can start. Whether all the services are enabled or not, depends on the settings in each configuration file.

The filename in this case, krb5-telnet can be anything; what matters is the service name that appears next to the service keyword in the file. In this case, the line service telnet tells xinetd the name of the service. As the first two lines that begin with telnet show, the port number of the Telnet service is This tells xinetd to listen to port 23 for Telnet service requests. For services that use the connectionless UDP sockets, this attribute would be set to dgram.

If this attribute is set to yes, xinetd waits until the server exits before starting the server again. In this case, the server runs the Telnet server as root. The result is that if the Telnet service fails, xinetd logs the name of the remote host that requested the service as well as the user ID of the remote user. By default the disable attribute is set to yes and Telnet is turned off.

The xinetd server uses the facilities of the libwrap library called the TCP wrapper , which provides an access-control facility for Internet services. If both files are empty, the TCP wrapper allows the host access to the requested service. Important attributes listed in the configuration file for each xinetd service include disable, user, and server. The disable attribute determines whether or not the service is accepting incoming connections via xinetd. If set to no, xinetd will hand off connections to it if the client first passes through the xinetd access control.

Setting it to yes disables the service. The user specified with the user attribute can be set to a username or a UID. This UID owns the server process for the individual xinetd service.

The server attributes specifies the program executed if the service is enabled. If the service is not already running, the stop action will fail, but the start action will still be called. When a request is made, the TCP wrappers access control configuration is checked first. If the client is denied access from the TCP wrappers rules, the connection is denied.

Both forms of access control can be used in conjunction with each other. Post a Comment. Redhat Enterprise linux. Search Engine Loading. Sallar RedhatEnterpriseLinux Blog. The xinetd Super Server. Configuring the xinetd Server. Master xinetd Configuration File. This is the master xinetd configuration file. Settings in the. The next two items are intended to be a quick access place to. Define general logging characteristics. Define access restriction defaults. Address and networking defaults.

Generally, banners are not used. This sets up their global defaults. The first two options inside the default section of xinetd. Individual xinetd Service Files.

Starting and Stopping xinetd. To start, stop, and restart xinetd, use the following command as root:. Related posts: How do you check if service is enabled Linux? How check if service is stopped in Linux? Best answer: What is the difference between service and daemon in Linux?

How check Xinetd status in Linux? Question: What is finger service in Linux? Like this post? Please share to your friends:. Even though HyperTerminal is not a part of Windows 10, the Windows 10 operating. Move the mouse pointer to the lower left corner of the screen, right-click, and.