[SunHELP] additional info on long message RE telnet non responce until ftp wake up.

[Stout, Logan]

Some additional information regarding this situation.

To our knowledge, not changes have been made to our networking, or the
firewalls, in addition, the problem occurs for machine that go through the
firewall, and machines that are local (on same subnet) and not going through
a firewall. In addition, to reiterate, all the machines this is happening on
have worked normally until the last 2 days. ( I am beginning to wonder if
there is an exploit or bug in tcpwrappers or something.) 

To summarize, this seems unlikely to be firewall related, as we don't pass
through one to reach the machines, and in fact, two machine this has
happened to are using one of their qfe's to connect directly to other
machines, and those direct connected machine could also not telnet in. The
problem seems like it IS related to inetd, as inet does nothing internally,
and fails to respond until an ftp connection comes in. Additionally, a truss
of inetd shows literally no activity, when attempting to telnet in, use any
of the login or shell services, until ftp connects.

this is what the inetd.conf  file contains, minus all commented lines.

ftp     stream  tcp     nowait  root    /usr/local/sbin/tcpd    in.ftpd
telnet  stream  tcp     nowait  root    /usr/local/sbin/tcpd    in.telnetd
name    dgram   udp     wait    root    /usr/sbin/in.tnamed     in.tnamed
shell   stream  tcp     nowait  root    /usr/local/sbin/tcpd    in.rshd
login   stream  tcp     nowait  root    /usr/local/sbin/tcpd    in.rlogind
exec    stream  tcp     nowait  root    /usr/sbin/in.rexecd     in.rexecd
comsat  dgram   udp     wait    root    /usr/sbin/in.comsat     in.comsat
100232/10       tli     rpc/udp wait root /usr/sbin/sadmind     sadmind
rquotad/1       tli     rpc/datagram_v  wait root /usr/lib/nfs/rquotad
rquotad
walld/1         tli     rpc/datagram_v  wait root
/usr/lib/netsvc/rwall/rpc.rwalld      rpc.rwalld
rstatd/2-4      tli   rpc/datagram_v wait root
/usr/lib/netsvc/rstat/rpc.rstatd rpc.rstatd
100221/1        tli     rpc/tcp wait root /usr/openwin/bin/kcms_server
kcms_server
fs              stream  tcp     wait nobody /usr/openwin/lib/fs.auto    fs
100235/1 tli rpc/tcp wait root /usr/lib/fs/cachefs/cachefsd cachefsd
kerbd/4         tli     rpc/ticlts      wait    root    /usr/sbin/kerbd
kerbd
printer         stream  tcp     nowait  root    /usr/lib/print/in.lpd
in.lpd
dtspc stream tcp nowait root /usr/dt/bin/dtspcd /usr/dt/bin/dtspcd
xaudio   stream tcp   wait root /usr/openwin/bin/Xaserver Xaserver -noauth
-inetd
100068/2-5 dgram rpc/udp wait root /usr/dt/bin/rpc.cmsd rpc.cmsd
100083/1 tli rpc/tcp wait root /usr/dt/bin/rpc.ttdbserverd
/usr/dt/bin/rpc.ttdbserverd
536870916/1     dgram   rpc/udp wait root /opt/SUNWvts/bin/sunvts
/opt/SUNWvts/bin/sunvts -g 
bootps       dgram  udp wait   root /usr/sbin/bootpd   bootpd
auto_remote     stream  tcp nowait  root    /usr/local/bin/auto_remote
auto_remote


thanks for any ideas or assistance.


Logan Stout
Nextel Unix Administrator
desk 678 291 3519
cell 678 300 6071