From d4968cd1ca63b6d5768e21f9efb560627f751b2e Mon Sep 17 00:00:00 2001 From: nectar Date: Mon, 15 Sep 2003 16:44:24 +0000 Subject: Add `-C 60' to the default flags for inetd, so that it is less vulnerable to run-of-the-mill DoS attacks in the default installation. --- etc/defaults/rc.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc') diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf index 0a287a9..b88a9dc 100644 --- a/etc/defaults/rc.conf +++ b/etc/defaults/rc.conf @@ -130,7 +130,7 @@ syslogd_flags="-s" # Flags to syslogd (if enabled). #syslogd_flags="-ss" # Syslogd flags to not bind an inet socket inetd_enable="NO" # Run the network daemon dispatcher (YES/NO). inetd_program="/usr/sbin/inetd" # path to inetd, if you want a different one. -inetd_flags="-wW" # Optional flags to inetd +inetd_flags="-wW -C 60" # Optional flags to inetd # # named. It may be possible to run named in a sandbox, man security for # details. -- cgit v1.1