From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from u2.inri ([107.191.125.208]) by pp; Wed May 20 14:17:01 EDT 2015
Subject:  proposal: disable most of /rc/bin/services/tcp* by default
Date: Wed, 20 May 2015 14:16:35 -0400
From: sl@9front.org
To: 9front@9front.org
Message-ID: <e494932ffe8abdadb9f17f009f11b471@u2.sfldmibb.det.wayport.net>
List-ID: <9front.9front.org>
X-Glyph: ➈
X-Bullshit: template metadata injection hardware
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Why are so many services enabled by default?

I propose to disable the following in the default install by moving
them from tcp* to !tcp*.  Functionality can be enabled by simply
copying !tcp* back to tcp* (and following whatever other procedures
were already required).

Let's turn these off:

	tcp110	# pop3
	tcp143	# imap
	tcp21	# ftp
	tcp23	# telnet
	tcp25	# smtp
	tcp53	# dns
	tcp513	# rlogind
	tcp993	# imap over tls
	tcp995	# pop3 over tls

In addition: Items that are left enabled by default (and really, even
the ones disabled by default) should be checked to ensure that the
installer creates the log files they attempt to write to.

I volunteer to do this if no one objects.

sl