Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jul 2001 11:54:03 -0700
From:      Erin Fortenberry <efortenb@sdccd.cc.ca.us>
To:        "'G D McKee'" <freebsd@gdmckee.com>, Lee Mark Mercado <mercadolee@hotmail.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   RE: login access
Message-ID:  <BBDEEDD2EB67D311A0240008C74B9345129C40@ntxmidcity.sdccd.cc.ca.us>

next in thread | raw e-mail | index | archive | help
> Put a # in front of the relevant lines in your etc/inetd.conf 
> file.  Then HUP inetd.

This is going to block all people from being able to have access via those
ports. What I would do (and have done) to build a firewall (ipf, ipfw, etc.)
and block any open ports to the machine. You need to remove telnet anyways,
or at least fix it. I would suggest running an ssh daemon like openssh, you
can build it out of the ports.

Blocking ports is only the beginning of actually securing the machine. You
need to add users with using a shell that will not give them access such as
/bin/nologin. You can also add users to the /etc/ftpusers file to block
their being able to use ftp.


Erin


> Gordon
> 
> ----- Original Message -----
> From: "Lee Mark Mercado" <mercadolee@hotmail.com>
> To: <freebsd-questions@FreeBSD.ORG>
> 
> > how could i deny login from FTP, TELNET - allowing only 
> POP3 access ?
> >
> > please help. thx> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BBDEEDD2EB67D311A0240008C74B9345129C40>