Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Network Services Sentry (NSS)
Chapter 1: Introduction
Additional Sidewinder G2 operating characteristics
If you have administered a standard UNIX system, you are probably familiar
with inetd, which manages daemons for network services. Daemons are
server processes that run continuously in the background and wait until they
are needed. On the Sidewinder G2, inetd has been replaced with the Network
Services Sentry (NSS), which manages most of the server and proxy services.
There is an NSS configuration file for each burb defined on your Sidewinder
G2. The NSS configuration files are updated for you when you make changes
to services. For example, the files are updated whenever you enable or disable
a proxy.
NSS regulation of valid ports for the Admin Console
For the Admin Console and synchronization services, NSS regulates the ability
to change the default port. You may use the Admin Console or the command
line to edit the default ports for these services. For example, you might want to
alter ports when the default conflicts with the port of another service, or when
you want to create a portlist with non-continuous numbers.
You can edit the port fields using the Admin Console Firewall Administration >
UI Access Control window. See “Backing up and restoring config files using
the Admin Console” on page 52 and “Configuring Admin Console access” on
page 91 for details.
When changing the port for a service, be sure to consider the criteria listed in
Table 5 below.
Table 5: Criteria for modifying a service port
Port type Criteria
Valid ports must be . . . • between 1–65535 when using the Admin
Console, and for all other services
• unique within ports assigned to other
services of the same type (server, t_proxy,
nt_proxy)
Valid port ranges must be . . . • two valid ports separated by a single hyphen
(may be non-continuous)
• listed in ascending order
• a maximum of 1995 ports
• between 1–65535 when using the Admin
Console, and for all other services
• unique within ports assigned to other
services of the same type (server, t_proxy,
nt_proxy)
Valid portlists must be. . . valid ports and/or valid ranges separated by
spaces
15