cat6500 sup720 and tftp and rsh servers

[rri]

Hi,

on my sup720 running IOS 12.2(17d)SXB are a rsh and a tftp server active ( at least a scan showed that ).

How do I disable these servers ?

[Kevin Dorrell]

Normally they are disabled by default. Do you have any lines "tftp-server filename" in the config? If so, the TFTP server will serve those files if asked. If not, I don't know; maybe it responds to the TFTP port, but will not sefve any files. Can someone confirm that?

Meanwhile, here is a doc to look at: http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/ffun_r/ffrprt2/frf011.htm#wp1018426

Kevin Dorrell,

Luxembourg

[rri]

I know that document.

I just checked, no "tftp-server filename " and no "ip rcmd rsh-enable" and "ip rcmp rcp-enable" lines in my config. I also did a no "ip rcmp ...." hoping it would disable the rsh server. but they are still up.

I know they should be down by default, but I can't remember that I ever enabled this servers ... no use for them. Can anyone confirm they are down by default ?

For security reasons I want to disable this servers.

Just hoping nobody can up/download/login via this services is not enough.

Anybody got a sup720 where this ports are down ?

Ruediger Rissmann