I had problems on site, I traced it to the inetd binary. I examined the source in netkit-base-0.11+ and found an undocumented field in the configuration scan of /etc/inetd.conf which if empty binds INADDR_ANY as the address of the directed service. gosh, I guess that means that if tftp is enabled for any address on a machine, then it is enable to all aliased address on a machine. Is this just an undocumented feature? char rcsid[] = "$Id: inetd.c,v 1.19 1997/09/23 09:16:40 dholland Exp dholland $"; char pkg[] = "netkit-base-0.10"; function getconfigent bounded by comments /VIRTUAL HOSTING / this represents a major security back door into every RH machine, does it not? /
This was the OpenBSD version of inetd that has been reverted to netkit-base-0.10.