On Wed, Apr 17, 2002 at 03:37:02PM -0500, Bob Tanner wrote:
> Quoting Florin Iucha (florin at iucha.net):
> > Ugh... a not running tftp server is a secure tftp server. And a not
> > installed one is even more secure.
> > 
> > Why do you need to have it secured? Install it, use it to upgrade CBOS
> > and the uninstall it.
> 
> Try explaining this to someone who installs redhat 7.2 with the most secure
> option which disallows any initiate incoming port. Then walk them through
> changing ipchains (7.2 uses ipchains by default). THEN install tftp, THEN
> uninstalling tftp. 

Isn't the firewall in RedHat 7.x controlled via SysV init scripts?

Just tell them to /etc/init.d/ipchains stop, run the server, stop the
server, start the ipchains, remove the server...

Anyway this is moot as Nate pointed out.

florin

-- 

"If it's not broken, let's fix it till it is."

41A9 2BDE 8E11 F1C5 87A6  03EE 34B3 E075 3B90 DFE4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20020417/02363cf1/attachment.pgp