Xerox 701P40211 manual # only on machines acting as boot servers

Page 40

Security and Network Setup

System Guide

#Tftp service is provided primarily forbooting. Most sites run this

#only on machines acting as "boot servers."

#tftp dgram udp wait root /usr/sbin/ in.tftpdin.tftpd -s /tftpboot

#Finger, systat and netstat give out userinformation which may be

#valuable to potential "system crackers."Many sites choose to disable

#some or all of these services to improvesecurity.

###fingerstream tcp nowait nobody /usr/sbin/ in.fingerdin.fingerd

#systat stream tcp nowait root /usr/bin/ps ps - ef

#netstat stream tcp nowait root /usr/bin/ netstat netstat -f inet

#Time service is used for clocksynchronization.

###time stream tcp nowait rootinternal

###time dgram udp wait rootinternal

#Echo, discard, daytime, and chargen are usedprimarily for testing.

###echo stream tcp nowait rootinternal

###echo dgram udp wait rootinternal

###discardstream tcp nowait rootinternal

###discarddgram udp wait rootinternal

###daytimedgram udp wait rootinternal

###daytimestream tcp nowait rootinternal

###chargenstream tcp nowait root internal

###chargendgram udp wait rootinternal

#RPC services syntax:

#<rpc_prog>/<vers> <endpoint-type> rpc/<proto> <flags> <user> \

#<pathname> <args>

#

# <endpoint-type> can be either "tli"

4-16	Common Controller

Image 40

Contents Xerox Document Services Platform Series USA Table of Contents Table of Contents Finishing PrintingFonts Troubleshooting Accounting and BillingHints and Tips Table of Contents Table of Contents System Guide Viii Introduction ContentsAbout this guide Conventions Customer SupportGateway Configuration Internet Services Http Gateway ConfigurationType cd /opt/XRXnps/XRXipp IPP Gateway ConfigurationGateway Simple Network Management Protocol Snmp Configuration Administrator must enable Snmp in License ManagerConfiguration variables SnmpdebuglogPrinter and job messages Snmp MIB SupportGateway Configuration System Guide NDS Setup Type cd /opt/XRXnps/XRXnwqsgw/binGateway Configuration System Guide Common Controller Backup and Restore BackupRestore Backing up a System Type restore Restoring a SystemSecurity and Network Setup Access and SecurityOverview of Security Changing the logon levelRoles and responsibilities User Password changesXerox responsibility Security Setup DocuSP 3.7 security changesUsing the High security setting Security and Network Setup System Guide User and File-level changes User levelMulticast routing disabled Solaris file permissions securedOS and host information hidden Sendmail daemon securedNetwork parameters secured Executable stacks disabled Remote CDE login disabledDocuSP router capabilities disabled NFS port monitor restrictedConfigure-xdss script DigiPath and Decomposition ServicesXdss script components Disabling LP Anonymous PrintingRemote shell internet service Disable-security and enable-security scriptsEnable-ftp and disable-ftp scripts User Account ManagementPrint command line client from remote systems Configure for xrxusr Other security tipsSample of inetd.conf file Document and backupOnline help for security # Syntax for TLI-based Internet services # only on machines acting as boot servers Orstream or dgram #rexd/1 tli rpc/tcp wait root /usr/sbin/ rpc.rexd rpc.rexd Quick reference How Do I? AnswerHow Do I? Answer Printing Controller settings for limited Fifo scheduling/printingFirst In/First Out Fifo Printing Enable/Disable Fifo Job Scheduling ‘Enabling Fifo Job Scheduling’Enabled Disabled ‘No Change Made’Impact on DocuSP printers Ascii and PCL Printing UtilitySetpclcontrol Utility Set lp/lprcopycount utility Socket Gateway Configuration Utility setVPSoption # ./setVPSoption -2NONVPSTiff orientation Tiff filesPerformance considerations Resolution Units Supported Tiff tagsCompression T4 OptionMicr Enablement Y ResolutionStrip Byte Counts and Strip Offsets Tile Width, Tile Length, Tile Offsets, Tile Byte CountsUsing Vipp Paper TraysPrinting hints Printing System Guide Common Controller Subset Finishing FinishingDocuTech Creating jobs to use subset finishing Subset Offset Page Level JogPCL Offset/Separator/Subset Finishing command Mixed Stacking PCL Paper Source CommandLarge Capacity ESC&15H Envelope Feed ESC&16H Additional finishing information Finishing System Guide Common Controller Fonts How to choose fontsFonts Resident Fonts Font download optionPostScript Resident Fonts System GuideFonts FontsSystem Guide PCL resident fonts Non Resident Fonts PCL 5e resident bitmap fontsDownloaded fonts Font substitution Optional or soft fontsPostScript fonts PCL 5e fonts Accounting and Billing AccountingAuto exporting accounting log Accounting exported valuesAccounting file fields System Guide Accounting and Billing Bytes Seconds ReadProcessed SkippedAccounting and Billing System Guide Sheets Printed Pages PrintedAccounting and Billing System Guide Billing Billable EventsBilling Meters Market Region Billing Meters for RegionCalling for service TroubleshootingDeclared faults Printer fault Undeclared faultsJob fault Windows problems Client problemsMacintosh problems DigiPath problems GUI problemsPrint Quality problems Font problemsJob flow problems Inoperable system problemsAt the # prompt, typesync sync halt and press Enter System Guide Troubleshooting PDL problems Job Integrity problemsPostScript problems Tiff problems Restore password Productivity and performance problems Restart DocuSP software without rebootingProblems when saving a job Printing system logs AlljobslogSystemlog StatuslogEpexceptionlog and epprimarylog Printing the system logsPrinting the accounting log Rebooting and restartingType sync sync halt Loading XJDC/Unix Opt/XRXnps/bin/XJDC -option,option... filenameConfiguring XJDC/Unix Xjdc Hints and TipsOutput files BASIC.JSLTroubleshooting System Guide Hints and Tips GeneralColor Systems General CommentsTime used to generate the PDL Time used to transfer PDLTime required to print PDL Job submission hints Number of imagesEthernet GatewaysJob RIP Hints Job submission orderVariable data Image Quality Job Printing Hints Skipped PitchesPCI Channel Interface PWB Trace Capture Procedure Perform a TraceExport the trace file to floppy Index NumericsIndex System Guide INDEX-3 Index INDEX-4 System Guide