Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 May 2001 01:26:03 -0700
From:      "Robert L Sowders" <rsowders@usgs.gov>
To:        david@banning.com
Cc:        owner-freebsd-questions@FreeBSD.ORG, questions@freebsd.org
Subject:   Re: telnet security question
Message-ID:  <OF3436683E.192AC2E6-ON88256A5A.00254C83@wr.usgs.gov>

next in thread | raw e-mail | index | archive | help
David,

While the following method is not the best, it will do in a pinch.  You 
could allow telnet in the inetd.conf and edit the hosts.allow file to only 
accept the ip's that you desire, and reject all others.  Make sure you use 
the paranoid option.  (does a reverse DNS lookup of connecting IPs)

BTW tcp_wrappers is part of the base system also, no need to install. Just 
edit the first section of the hosts.allow files to comment out All:Allow 
and you are using tcp_wrappers.  See man hosts.allow and man 5 
hosts_access.  Some pretty cool stuff in there.






David Banning <sky_tracker@yahoo.com>
Sent by: owner-freebsd-questions@FreeBSD.ORG
05/27/2001 01:09 AM
Please respond to david

 
        To:     questions@freebsd.org
        cc: 
        Subject:        telnet security question

Is there a way to allow users on our local area network to telnet
into the server, but block telnet access to the server from the internet?

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OF3436683E.192AC2E6-ON88256A5A.00254C83>