Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am attempting to lock down the ftp server to listen on a specific interface instead of all interfaces. I added this line to the end of /etc/ftpd/ftpaccess

daemonaddress   192.168.x.x

The I ran svcadm restart ftp

But the server is still listening on 192.168.y.y

Any ideas? I read from man ftpaccess that this only works in standalone mode, but I can't figure out what that is or how to use it.

share|improve this question
1  
"standalone" probably means "not running under inetd" here (maybe inetd is even integrated into the svc stuff now? - haven't worked much with Solaris 10). If the ftpd process is only around when somebody is connected, you're not running in standalone mode. Generally, the software that comes with Solaris is usually a bit lacking, you would maybe have a better time with switching to e.g. proftpd. –  C. Ramseyer Sep 6 '11 at 22:00
    
This is a legacy setup based on Solaris 10 6/06, we will not be upgrading any software on these systems. Thank you for the information though. I do believe that you are correct about ftp running under inet. I will take a look from that angle. –  George Bailey Sep 6 '11 at 22:24

1 Answer 1

up vote 0 down vote accepted

Thanks to C. Ramseyer's comment, I found what I was looking for.

If found some documentation for /etc/inet/inetd.conf that described addr syntax, that looked promising.

Then I went to inetd.conf and it said to use inetadm(1M) (the new way).

I looked at man inetadm and under "EXAMPLES" I found the ability to -modify a property for a service and another to -list properties on a service.

I looked at inetadm -l ftp and found bind_addr

The solution is to use inetadm -m ftp bind_addr=192.168.x.x

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.