M e r i d i a n I I U s e r M a n u a l
62
C H A P T E R F I V E
63
M e r i d i a n I I U s e r M a n u a l
S E C U R I T Y
restrict default noquery nomodify nopeer
restrict 127.0.0.1 nomodify
restrict 0::1 nomodify
restrict 192.168.1.10 nomodify
Disable Protocols
See below for instructions on how to completely disable the following protocols: Telnet, Time, Day-
time, SSH, SNMP, and HTTPS. See
Chapter 9 - PTP/IEEE-1588 Option
for how to disable PTP.
The Network Time Protocol (NTP) cannot be disabled.
Disable Telnet, Time and Daytime
To disable Telnet, Time and Daytime use the
inetdconfig
command to start an interactive script
that will ask you which protocols to disable. Then it will modify the
/etc/inetd.conf
file, which is read
by the super-server daemon,
inetd
. Requests from remote hosts for protocols not configured in
/etc/
inetd.conf
will be refused. Currently, three servers are configurable via
inetdconfig
: Time and
Daytime (whose protocol servers are contained within the
inetd
daemon itself), and
in.telnetd
.
Any one or all of these may be enabled or disabled for start-up.
Disable SNMP, SSH and HTTPS
To disable SNMP, SSH or HTTPS, you only have to modify the file mode of the scripts that control
their execution. These are located in the /
etc/rc.d
directory.To disable any of these daemons, issue
one or more of these commands:
chmod -x /etc/rc.d/rc.snmpd
chmod -x /etc/rc.d/rc.sshd
chmod -x /etc/rc.d/rc.httpd
After issuing these commands, you must copy the modified file(s) to the non-volatile FLASH area
using one or more of these commands:
cp -p /etc/rc.d/rc.snmpd /boot/etc/rc.d
cp -p /etc/rc.d/rc.sshd /boot/etc/rc.d
cp -p /etc/rc.d/rc.httpd /boot/etc/rc.d
Reboot Meridian II when done for the changes to take effect.
IMPORTANT
After modifying
/etc/rc.d/rc.snmpd, rc.sshd or rc.httpd
, you must copy them to the
/boot/etc/rc.d
directory and reboot the system. It is very important to use the
-p
when performing the copy. During the
boot process, the files contained in the
/boot/etc/rc.d
directory are copied to the working
/etc/rc.d
direc-
tory on the system RAM disk. In this way the factory defaults are overwritten.
Summary of Contents for Meridian II
Page 2: ......
Page 20: ...M e r i d i a n I I U s e r M a n u a l This page intentionally left blank...
Page 139: ...119 M e r i d i a n I I U s e r M a n u a l R E A R P A N E L I O...
Page 216: ...M e r i d i a n I I U s e r M a n u a l 196 A P P E N D I X J...
Page 235: ...215 M e r i d i a n I I U s e r M a n u a l S P E C I F I C AT I O N S...
Page 236: ...M e r i d i a n I I U s e r M a n u a l 216 A P P E N D I X K...
Page 239: ......
