请教solaris 10 关闭pop3功能，关闭110端口

天天兄弟

solaris 10 关闭pop3功能，关闭110端口\r\n\r\n我已关闭了sendmail\r\nnetstat -an|grep 110  也没有看到110端口\r\n\r\n但是我用别的机器telnet 192.168.0.* 110,结果如下\r\n\r\nType `help\' to learn how to use Xshell prompt.\r\nXshell:\\> telnet 192.168.0.* 110\r\n\r\nConnecting to 192.168.0.* 110...\r\nConnection established.\r\nEscape character is \'^@]\'.\r\n\r\n然后一闪，窗口就关上了。\r\n\r\n请指教哈

yuhuohu

netstat -an|grep 110  也没有看到110端口\r\n\r\n没有看到就是已关闭了哈

天天兄弟

关闭了？为啥还会telnet上去呢？\r\n\r\n更重要的是还能用X-Scan，扫描出来110端口。

yuhuohu

你确定是在同一网段telnet这个端口？有时候中间的防火墙会有某些策略代替主机对未开放的端口进行应答

天天兄弟

我是在内网里telnet的，x-Scan也是在内网里扫的。 还没有经过防火墙呢。

天天兄弟

高人在哪里啊？高人在哪里？\r\n \r\n\r\n在线等

midc

在telnet的机器上抓包吧

天天兄弟

其实我想知道的是POP3怎么关？

guopy007

How to enable IMAP and POP3 on Solaris 10\r\n\r\nIn Solaris 10 internet service management using inetd is deprecated. Instead, you should use the System Managemen Facility. This uses an XML descriptor to describe how to start a service, how to stop it and how to restart it if it fails. Rather than writing the descriptor from scratch, Solaris provides a tool to migrate typical inetd.conf entries to the new XML format.\r\nI used this to make the provided pop3d and inetd daemons be SMF complient.\r\n\r\nI created a new file & added the two lines which I would have used to start the services if Solaris still used inetd.\r\n\r\ncd /tmp\r\necho \"pop3 stream tcp nowait root /usr/sfw/sbin/tcpd /opt/sfw/sbin/ipop3d\" > imapd.txt\r\necho \"imap stream tcp nowait root /usr/sfw/sbin/tcpd /opt/sfw/sbin/imapd\" >> imapd.txt\r\n/usr/sbin/inetconv -i /tmp/imapd.txt -o /tmp/\r\ncp pop3-tcp.xml /var/svc/manifest/network/\r\ncp imap-tcp.xml /var/svc/manifest/network/\r\nsvccfg import /var/svc/manifest/network/pop3-tcp.xml\r\nsvccfg import /var/svc/manifest/network/imap-tcp.xml\r\nsvcadm disable svc:/network/pop3/tcp:default\r\nsvcadm enable svc:/network/pop3/tcp:default\r\nsvcadm disable svc:/network/imap/tcp:default\r\nsvcadm enable svc:/network/imap/tcp:default\r\nLets try it and see if it works\r\n\r\nbash-3.00# telnet localhost pop3\r\nTrying ::1...\r\ntelnet: connect to address ::1: Connection refused\r\nTrying 127.0.0.1...\r\nConnected to localhost.\r\nEscape character is \'^]\'.\r\n+OK POP3 localhost v2003.83 server ready\r\n\r\nYus, seems to be OK...

shot

netstat -an|grep .110