ÇëÎÊÔõô×ötelnet·þÎñÆ÷£¿
ÓÐʲôÈí¼þ?thanks~~ Äãϵͳ°²×°ºó¾ÍÓÐÒ»¸ötelnetd, Õâ¸öÊÇtelnet·þÎñÆ÷£¡ ÎÒ´ò¿ªÁË£¬Çë¿´¿´ÕâÊÇʲôÒâ˼£¿
# /usr/libexec/telnetd
telnetd: getpeername: Socket operation on non-socket /etc/inetd.conf
ÀïÊÇÔõôÉèÖõģ¿ ÎÒÏÖÔÚ°ÑtelnetÄÇÐÐ×¢ÊÍÁË¡£
ÉÏÃæµÄÊä³öÊDZíʾ/etc/inetd.confµÄtelnetû´ò¿ªÂ𣿠°Ñ/etc/inetd/ÖеÄtelnet×¢Ê͵ô£¬ ÖØÆôinetd£¬ È»ºóÔÙÊÔÊÔ£¬ ¿´ÓÐʲôÐÅÏ¢£¿ # ps -x|grep inetd
2800 ?? Is 0:00.00 inetd
# /usr/libexec/telnetd
telnetd: getpeername: Socket operation on non-socket
ÎÒÒѾ°ÑËü×¢ÊÍÁË¡£È˼ҿÉÒÔpingµ½ÎÒ¡£µ«²»ÄÜTELNET¡£
192# telnet 220.173.150.*
Trying 220.173.150.*...
telnet: connect to address 220.173.150.*: Operation timed out
telnet: Unable to connect to remote host
¿ÉÒÔTELNET 127.0.0.1
²»¿ÉÒÔTELNET ×ÔÒѵÄIPµØÖ·¡£ 127.0.0.1ÊÇϵͳ×Ô´øµÄ£¬ÊÇÒ»¸ö»ØÂ·£¬ ÿ̨»ú¶¼¿ÉÒÔÓ㬠µ«ËüÖ»ÄÜÔÚ±¾µØÉÏʹÓ㬠ÊÇÒ»¸ö±£ÁôµØÖ·£¡±ÈÈçÄã×°ÁËÒ»¸öWEB·þÎñÆ÷£¬ û¹Ì¶¨IP£¬ ÓÃÕâ¸ö127.0.0.1¾Í¿ÉÒԵǽÄãµÄWEB·þÎñÆ÷£¡
pa -aux ¿´¿´¶¼ÓÐЩʲô½ø³Ì£¿ # ps -x
PID TT STAT TIME COMMAND
0 ?? DLs 0:00.00 (swapper)
1 ?? SLs 0:00.01 /sbin/init --
2 ?? DL 0:00.83 (pagedaemon)
3 ?? DL 0:00.00 (vmdaemon)
4 ?? DL 0:00.14 (bufdaemon)
5 ?? DL 0:02.54 (syncer)
6 ?? DL 0:00.14 (vnlru)
80 ?? Ss 0:00.13 /usr/sbin/syslogd -s
87 ?? Is 0:00.23 /usr/sbin/cron
111 ?? Ss 0:14.47 moused -z 4 -p /dev/cuaa1 -t intellimouse
138 ?? Ss 0:20.53 ppp -ddial
152 ?? S 18:39.67 /usr/X11R6/bin/XFree86 :0 -nolisten tcp
168 ?? Is 0:00.21 /usr/local/libexec/bonobo-activation-server --ac-activate --ior-output
170 ?? Ss 0:15.23 gnome-smproxy --sm-client-id default0
172 ?? S 0:01.89 gnome-settings-daemon --oaf-activate-iid=OAFIID:GNOME_SettingsDaemon -
181 ?? Ss 0:33.90 /usr/X11R6/bin/metacity --sm-client-id=default1
185 ?? Ss 1:14.74 gnome-panel --sm-client-id default2
187 ?? Ss 0:55.80 nautilus --no-default-window --sm-client-id default3
189 ?? S 0:43.33 /usr/X11R6/libexec/battstat-applet-2 --oaf-activate-iid=OAFIID:GNOME_B
191 ?? S 0:08.02 /usr/X11R6/libexec/mixer_applet2 --oaf-activate-iid=OAFIID:GNOME_Mixer
195 ?? S 0:53.73 gnome-terminal
198 ?? Is 0:01.30 kdeinit: Running... (kdeinit)
199 ?? I 0:00.03 gnome-pty-helper
204 ?? I 0:04.54 kdeinit: dcopserver --nosid --suicide (kdeinit)
208 ?? I 0:00.48 kdeinit: klauncher (kdeinit)
210 ?? S 3:09.28 kdeinit: kded (kdeinit)
216 ?? S 13:52.59 kdeinit: konqueror --silent (kdeinit)
1779 ?? S 9:00.17 kdeinit: konqueror --silent (kdeinit)
2265 ?? S 0:00.72 kdeinit: kio_uiserver (kdeinit)
3019 ?? S 0:00.15 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3020 ?? S 0:00.15 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3021 ?? S 0:00.15 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3068 ?? S 0:00.06 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3069 ?? S 0:00.07 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3070 ?? S 0:00.07 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3071 ?? S 0:00.07 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3072 ?? S 0:00.06 kdeinit: kio_http http /tmp/ksocket-root/klauncherlbHJQn.slave-socket
3105 ?? Ss 0:00.00 inetd
201 p0 Is+ 0:00.04 tcsh
211 p1 Is+ 0:00.17 tcsh
217 p2 Is 0:00.03 tcsh
1761 p2 S+ 0:02.30 stardict
1457 p3 Is 0:00.13 tcsh
1587 p3 I 0:07.25 //usr/local/share/fcitx/fcitx
2413 p3 I+ 0:00.00 man 8 traceroute
2414 p3 I+ 0:00.00 sh -c /usr/bin/zcat /usr/share/man/cat8/traceroute.8.gz | more -s
2416 p3 I+ 0:00.01 more -s
2497 p4 Is+ 0:00.15 tcsh
2739 p5 Ss 0:00.11 tcsh
3106 p5 R+ 0:00.00 ps -x
132 v0 Is 0:00.02 login [pam] (login)
135 v0 I 0:00.02 -tcsh (tcsh)
139 v0 I+ 0:00.01 /bin/sh /usr/X11R6/bin/startx
151 v0 I+ 0:00.01 xinit /root/.xinitrc -- -nolisten tcp
160 v0 S 0:03.10 gnome-session
161 v0 Z 0:00.00 (sh)
166 v0 I 0:00.73 /usr/X11R6/libexec/gconfd-2 13
134 v2 Is+ 0:00.00 /usr/libexec/getty Pc ttyv2
161 v0 Z 0:00.00 (sh)
133 v1 Is+ 0:00.00 /usr/libexec/getty Pc ttyv1
# ллÄãÀ °æÖ÷¡£
·¢ÏÖ telnet 127.0.0.1 and ftp 127.0.0.1 ¶¼ÐУ¬¿´À´ÊÇISPµÄÎÊÌâÁË£¬ÊÇÂ𣿠Õâ¸öÒ²¸ã²»Çå³þÊDz»ÊÇISPµÄÎÊÌâ¾õµÃISPÒ»°ã²»»á½ûÓÃÕâЩµÄ°É£¬ËäÈ»²»Äܱ»pingͨ£¬µ«ÕÕÑù¿ÉÒÔÏòÍâÌṩhttp,ftpµÈ·þÎñµÄ£¬ 127.0.0.1ÊDZ¾µØ»ØÂ·£¬ ²»ÊÇISP¸øÄ㿪¸øÍ¨µÄ£¬ Äã×°ÁËÍø¿¨£¬ ²»ÄÜÉÏÍøÕâ¸öIPÒ²ÕÕÑù¿ÉÒÔÓã¡ ·À»ðǽ¼¶±ðÌ«¸ßÁË!!
Éè³ÉÖм¶ÒÔÏ [QUOTE][i]×î³õÓÉ brain_man ·¢²¼[/i]
[B]·À»ðǽ¼¶±ðÌ«¸ßÁË!!
Éè³ÉÖм¶ÒÔÏ [/B][/QUOTE]
£¿£¿ [QUOTE][i]×î³õÓÉ 001 ·¢²¼[/i]
[B]
£¿£¿ [/B][/QUOTE]
ÊDz»ÊÇipfilter»òÕßipfwʲô¶«¶«µÄ£¬Äã½ûÓÃÁË¿´Ðв»£¬
cat /etc/ppp/ppp.conf
# Prevent ICMP, DNS (53), and NTP (123) from keeping the# connection alive:
set filter alive 0 deny icmp
set filter alive 1 deny udp src eq 53
set filter alive 2 deny udp dst eq 53
set filter alive 3 deny udp src eq 123
set filter alive 4 deny udp dst eq 123
set filter alive 5 permit 0 0
# Prevent NTP (123) from causing a dialup:
set filter dial 0 deny udp src eq 123
set filter dial 1 deny udp dst eq 123
set filter dial 2 permit 0 0
# Allow ident (113), ftp (20 & 21), SMTP (25), DNS (53),
# HTTP (80), POP3 (110), NNTP (119), NTP (123), HTTPS (443),
# SOCKS (1080), ICMP (ping), CVSup (5998 & 5999),
# and traceroute (>33433).
# Everything else is blocked by default:
set filter in 0 permit tcp dst eq 113
set filter out 0 permit tcp src eq 113
set filter in 1 permit tcp src eq 20 dst gt 1023
set filter out 1 permit tcp dst eq 20
set filter in 2 permit tcp src eq 21 estab
set filter out 2 permit tcp dst eq 21
set filter in 3 permit tcp src eq 25
set filter out 3 permit tcp dst eq 25
set filter in 4 permit udp src eq 53
set filter out 4 permit udp dst eq 53
set filter in 5 permit tcp src eq 80
set filter out 5 permit tcp dst eq 80
set filter in 6 permit udp src eq 80
set filter out 6 permit udp dst eq 80
set filter in 7 permit tcp src eq 110
set filter out 7 permit tcp dst eq 110
set filter in 8 permit tcp src eq 119
set filter out 8 permit tcp dst eq 119
set filter in 9 permit udp src eq 123
set filter out 9 permit udp dst eq 123
set filter in 10 permit tcp src eq 443
set filter out 10 permit tcp dst eq 443
set filter in 11 permit udp src eq 443
set filter out 11 permit udp dst eq 443
set filter in 12 permit tcp src eq 1080
set filter out 12 permit tcp dst eq 1080
set filter in 13 permit udp src eq 1080
set filter out 13 permit udp dst eq 1080
set filter in 14 permit tcp src eq 5998
set filter out 14 permit tcp dst eq 5998
set filter in 15 permit tcp src eq 5999
set filter out 15 permit tcp dst eq 5999
set filter in 16 permit icmp
set filter out 16 permit icmp
set filter in 17 permit udp dst gt 33433
set filter out 17 permit udp src gt 33433
Ò³:
[1]