• EXIT — Logs the exit status or termination signal of the service (log_on_success).• HOST — Logs the remote host's IP address (log_on_failure and log_on_success).• PID — Logs the process ID of the server receiving the request (log_on_success).• USERID — Logs the remote user using the method defined in RFC 1413 for all multi-threadedstream services (log_on_failure and log_on_success).For a complete list of logging options, refer to the xinetd.conf man page.4.3.2. Access Control OptionsUsers of xinetd services can choose to use the TCP wrappers hosts access rules, provideaccess control via the xinetd configuration files, or a mixture of both. Information concerningthe use of TCP wrappers hosts access control files can be found in Section 2, “TCP WrappersConfiguration Files”.This section discusses using xinetd to control access to services.NoteUnlike TCP wrappers, changes to access control only take effect if the xinetdadministrator restarts the xinetd service.Also, unlike TCP wrappers, access control through xinetd only affects servicescontrolled by xinetd.The xinetd hosts access control differs from the method used by TCP wrappers. While TCPwrappers places all of the access configuration within two files, /etc/hosts.allow and/etc/hosts.deny, xinetd's access control is found in each service's configuration file withinthe /etc/xinetd.d/ directory.The following hosts access options are supported by xinetd:• only_from — Allows only the specified hosts to use the service.• no_access — Blocks listed hosts from using the service.• access_times — Specifies the time range when a particular service may be used. The timerange must be stated in 24-hour format notation, HH:MM-HH:MM.The only_from and no_access options can use a list of IP addresses or host names, or canspecify an entire network. Like TCP wrappers, combining xinetd access control with theenhanced logging configuration can increase security by blocking requests from banned hostswhile verbosely recording each connection attempt.Altering xinetd Configuration Files321
