daemon to listen on localhost only?

2006-05-10 Thread Sean Murphy
Is there a way to tell a daemon to listen only to the localhost without 
using a firewall?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Jonathan Horne
 Is there a way to tell a daemon to listen only to the localhost without
 using a firewall?


any chance you could tell us what deamon youre trying to configure? (that
would help).

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Giorgos Keramidas
On 2006-05-10 12:59, Sean Murphy [EMAIL PROTECTED] wrote:
 Is there a way to tell a daemon to listen only to the localhost without
 using a firewall?

This depends on the daemon.  Some programs accept a command-line option
to do this.  Others don't.

What daemon are you interested in doing this for?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Charles Swiger

On May 10, 2006, at 3:59 PM, Sean Murphy wrote:
Is there a way to tell a daemon to listen only to the localhost  
without using a firewall?


If the daemon has an option to listen on a specific IP address, yes;  
otherwise, no.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: daemon to listen on localhost only?

2006-05-10 Thread Scott Hiemstra
 Is there a way to tell a daemon to listen only to the 
 localhost without 
 using a firewall?

As others have stated, check the daemon you are trying to run but many can
also run via tcpserver (http://cr.yp.to/ucspi-tcp/tcpserver.html).  Going
this route you can limit the listening IP to localhost or whatever.  I
personally swear by this route as it is a good/clean method of controling
services.

Scott



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Sean Murphy
the ftp daemon that is started with inetd it is the ftp that comes with 
the freebsd system 5.4.


Thanks

Charles Swiger wrote:

On May 10, 2006, at 3:59 PM, Sean Murphy wrote:
Is there a way to tell a daemon to listen only to the localhost 
without using a firewall?


If the daemon has an option to listen on a specific IP address, yes; 
otherwise, no.


---Chuck


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Sean Murphy
the ftp daemon that is started with inetd it is the ftp that comes with 
the freebsd system 5.4.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: daemon to listen on localhost only?

2006-05-10 Thread Scott Hiemstra
For the stock freebsd ftpd, you should be able to change inetd.conf:
FROM
ftp stream  tcp nowait  root/usr/libexec/ftpd   ftpd -l
TO
ftp stream  tcp nowait  root/usr/libexec/ftpd   ftpd -l -a
127.0.0.1

I think that should work but untested.

Scott
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Sean Murphy
 Sent: Wednesday, May 10, 2006 4:43 PM
 To: 'freebsd-questions@freebsd.org'
 Subject: Re: daemon to listen on localhost only?
 
 the ftp daemon that is started with inetd it is the ftp that 
 comes with 
 the freebsd system 5.4.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: daemon to listen on localhost only?

2006-05-10 Thread Scott Hiemstra
Actually, it would be:
ftp stream  tcp nowait  root/usr/libexec/ftpd   ftpd -l -D
-a 127.0.0.1

Sorry for the confusion,
Scott
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Scott Hiemstra
 Sent: Wednesday, May 10, 2006 4:54 PM
 To: freebsd-questions@freebsd.org
 Subject: RE: daemon to listen on localhost only?
 
 For the stock freebsd ftpd, you should be able to change inetd.conf:
 FROM
 ftp stream  tcp nowait  root/usr/libexec/ftpd 
   ftpd -l
 TO
 ftp stream  tcp nowait  root/usr/libexec/ftpd 
   ftpd -l -a
 127.0.0.1
 
 I think that should work but untested.
 
 Scott
  
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
 Sean Murphy
  Sent: Wednesday, May 10, 2006 4:43 PM
  To: 'freebsd-questions@freebsd.org'
  Subject: Re: daemon to listen on localhost only?
  
  the ftp daemon that is started with inetd it is the ftp that 
  comes with 
  the freebsd system 5.4.
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
  [EMAIL PROTECTED]
  
  
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Charles Swiger

On May 10, 2006, at 4:35 PM, Sean Murphy wrote:
the ftp daemon that is started with inetd it is the ftp that comes  
with the freebsd system 5.4.


OK.  man ftpd suggests the following options are relevant:

 -4  When -D is specified, accept connections via AF_INET4  
socket.


 -6  When -D is specified, accept connections via AF_INET6  
socket.


 -a  When -D is specified, accept connections only on the  
specified

 address.

--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]