Re: [cobalt-security] Unused services, IMAP and Telnet

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Thu, 5 Dec 2002, Goade, Matthew wrote:

> I do not use these, and no one else on the server does either. If I comment them out of inetd.conf,
> I get mail from admin complaining. The GUI Active Monitor is also quite
> angry. Is there a way to disable these without setting off alarms?
> Or edit the alarms to not care about these services?
>
[---- thanks to shimi on the cobalt-security list ----]
vi or pico /usr/admserv/cgi-bin/.cobalt/services/services.cgi
Change this line:
$ret=Cobalt::swatch::swatch_set_service_on("imap");
To this:
$ret=Cobalt::swatch::swatch_set_service_off("imap");
Now go into the GUI's Control Panel and just hit the
'Save Changes' button.
This keeps Active Monitor from grumbling about IMAP being turned off.

Telnet should be OK if you turn it off in the GUI
Else find the telnet block in services.cgi and fix it.

Gerald
--
http://frontstreetnetworks.com | http://raqware.com
Front Street Networks LLC  | Phone: +1 203-785-0699
229 Front Street, Ste. C, New Haven, CT. 06513-3203