Binding inetd to ip

[Nicholas Tang <ntang () rga com>]

Is it possible to bind inetd to a specific ip address/ethernet card under
linux?  I haven't been able to find any info myself, but the reason I
ask is because I currently am running a nameserver that has two network
cards.

I have (chroot'ed to its own partition) bind 8.2.2-P5 bound to the second
ethernet card and I want nothing else on that card - I want it clean
except for port 53, basically.

I bound ssh to the first card and am running xntpd on there as well (does
that have to actually bind to a port?  Is there any way to stop that?  If
not is there any way to at least limit it to one card/ip?  Would I be
better off just running ntpdate once an hour?) and then I'm running
Portsentry on the box to watch for any suspicious activity.

Here's how a netstat -na looks:

[root@thisbox /root]# netstat -na
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 199.2.242.x:22        199.2.242.z:1092      ESTABLISHED 
tcp        0      0 199.2.242.x:22        0.0.0.0:*               LISTEN      
tcp        0      0 199.2.242.y:53        0.0.0.0:*               LISTEN      
udp        0      0 199.2.242.y:123       0.0.0.0:*                           
udp        0      0 199.2.242.x:123       0.0.0.0:*                           
udp        0      0 127.0.0.1:123           0.0.0.0:*                           
udp        0      0 0.0.0.0:123             0.0.0.0:*                           
udp        0    304 0.0.0.0:1024            0.0.0.0:*                           
udp        0      0 199.2.242.y:53        0.0.0.0:*                           
raw        0      0 0.0.0.0:17              0.0.0.0:*               7           
raw        0      0 0.0.0.0:6               0.0.0.0:*               7           
raw        0      0 0.0.0.0:1               0.0.0.0:*               7           
raw        0      0 0.0.0.0:6               0.0.0.0:*               7           
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  0      [ ACC ]     STREAM     LISTENING     456    /dev/gpmctl
unix  0      [ ACC ]     STREAM     LISTENING     364    /var/run/ndc
unix  4      [ ]         DGRAM                    299    /dev/log
unix  1      [ ]         DGRAM                    301
/var/named/dev/log
unix  0      [ ]         DGRAM                    2558   
unix  0      [ ]         DGRAM                    467    
unix  0      [ ]         DGRAM                    410    
unix  0      [ ]         DGRAM                    362    
unix  0      [ ]         DGRAM                    315    
[root@thisbox /root]# 

Any ideas on anything else I can clean up?  Also, I don't mean to sound
ignorant but anyone have any idea what's listening on 1024, 1, 6 ,and
17?  It's a Redhat 6.0 box, if that helps.

Nicholas

======================================================================
Nicholas Tang     Senior System Administrator     R/GA Digital Studios
ntang () rga com       (212) 946-4224 (voice)        (212) 946-4010 (fax)
======================================================================