Linux tftp listens on all interfaces and IPs by DEFAULT Security Risk Hole Solution

Just edit your tftp file for xinetd like this:

*Change the IP to be the IP of the interface you want to listen on.

To test if your tftp is available on a certain IP range use nc -u yourip 69 to see if you can still connect (/var/log/messages or /var/log/syslog) should show the connection if it is open.

Oct 13 23:20:34 01 xinetd[26631]: Started working: 1 available service
Oct 13 23:20:40 01 xinetd[26631]: START: tftp pid=26634 from=192.5.9.1

 

service tftp
{
        socket_type             = dgram
        protocol                = udp
        wait                    = yes
        user                    = root
        server                  = /usr/sbin/in.tftpd
        server_args             = -s /tftpboot
        disable                 = no
        bind                    = 10.10.10.1
        per_source              = 11
        cps                     = 100 2
        flags                   = IPv4
}


Tags:

linux, tftp, listens, interfaces, ips, default, solutionjust, edit, xinetd, ip, interface, nc, yourip, var, syslog, oct, pid, socket_type, dgram, protocol, udp, user, server, usr, sbin, tftpd, server_args, tftpboot, disable, bind, per_source, cps, flags, ipv,

Latest Articles

  • Linux Mint Dual Boot Install Avoid Wiping our your Main C: drive /dev/sda MBR
  • QEMU-KVM soundhw deprecated how to enable sound in QEMU 4.x series
  • Virtualbox Error Cannot register the hard disk because a hard disk with UUID already exists solution
  • kernel: [549267.368859] mate-terminal[7871]: segfault at 2000000101 ip 00007f5d0a9548f0 sp 00007fff7012c610 error 4 in libgobject-2.0.so.0.4800.2[7f5d0a920000+52000]
  • apcupsd how to setup and monitor APC UPS units
  • How To Password Reset, Recover, Bypass, Remove and Unlock on Windows 10,8,7,Vista,XP,NT,2000,2003,2008,2012,2016,2019 Administrative Login Programs
  • Nvidia Ubuntu Linux Screentearing Video with solution driver
  • ?? Question Marks for time, permissions and size of a file?
  • mdadm how to stop a check
  • access denied by acl file qemu-kvm: bridge helper failed
  • Linux NIC connecting at 100M instead of 1000M gigabit speeds? It could be overheating
  • "This kernel requires the following features not present on the CPU: cmov Unable to boot - please use a kernel appropriate for your CPU.
  • http://vault.centos.org/5.9/os/i386/repodata/filelists.xml.gz: [Errno -1] Metadata file does not match checksum solution
  • Linux Ubuntu Wifi Disabled Only Works When Laptop Plugged Into Wall AC Power
  • CentOS 6 impossible to compile a newer libguestfs
  • chroot
  • How To Get Started on Ubuntu with gpt-2 OpenAI Text Prediction
  • Remove cloud-init in your VM
  • QEMU-KVM KVM Command Line Practical Guide
  • Linux How To Change NIC Name to eth0 instead of enps33 or enp0s25