AIX 关闭ftp服务

很多情况下，比如处于安全考虑，我们需要关闭ftp服务。在AIX平台下可以采用如下方法。
一、检查代理服务进程（inetd，很多平台如linux，已经被xinetd所取代）是否存在。
[quote]# ps -ef|grep inetd
root 18892 39822 0 Mar 04 - 0:00 /usr/sbin/inetd
root 43704 56780 0 23:21:22 pts/0 0:00 grep inetd [/quote]
检查ftp端口是否已经更改，也可以在/etc/services中查看
[quote]# netstat -Aan|grep 21
70dec210 tcp 0 0 *.21 *.* LISTEN[/quote]
查看进程号
[quote]# rmsock 70bf1210 tcpcb
The socket 0x70bf1008 is being held by proccess 18892 (inetd).[/quote]

使用rmsock需要注意的是
[color=red]rmsock is used to remove sockets that do not have file descriptors. However, rmsock doesn’t remove a socket that still has a valid file descriptor but, instead, returns the identity of the process owner.[/color]

二、修改/etc/inetd.conf，注释ftp一行。
三、刷新代理服务
[quote]# refresh -s inetd
0513-095 The request for subsystem refresh was completed successfully.[/quote]
或者刷新tcpip
[quote]# refresh -g tcpip
0513-095 The request for subsystem refresh was completed successfully.
0513-036 The request could not be passed to the rwhod subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the xntpd subsystem.
Start the subsystem and try your command again.
0513-095 The request for subsystem refresh was completed successfully.
0513-095 The request for subsystem refresh was completed successfully.
0513-095 The request for subsystem refresh was completed successfully.
0513-095 The request for subsystem refresh was completed successfully.
0513-036 The request could not be passed to the dpid2 subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dhcpcd subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dhcpcd6 subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the ndpd-host subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the ndpd-router subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the tftpd subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the gated subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the named subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the routed subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the iptrace subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the timed subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dhcpsd subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dhcpsdv6 subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dhcprd subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the mrouted subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the pxed subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the binld subsystem.
Start the subsystem and try your command again.
0513-036 The request could not be passed to the dfpd subsystem.
Start the subsystem and try your command again.
0513-095 The request for subsystem refresh was completed successfully.[/quote]

检查客户端是否能连接至主机，可以看到ftp服务已经被关闭
[quote]D:\>ftp 172.16.4.2
Connected to 172.16.4.2.
Connection closed by remote host.[/quote]