< Previous Page Return to Title Page Next Page >

Securing fingerd

  • By default, finger @wassamatta.edu will yield names of all users who are logged in
  • fingerd -s option prevents listing of all users who are logged in
  • -p option sends output of a program other than finger in response to net queries. We use nonetfinger.c:
#include <stdio.h>
main() {
       puts("Sorry; for security reasons, and to prevent our users");
       puts("from being targeted for unsolicited \"junk\" e-mail, this");
       puts("site does not honor network finger requests. We apologize");
       puts("for any inconvenience.");
}