[1766] in linux-net channel archive
Re: rlogin yes, telnet no ?!
daemon@ATHENA.MIT.EDU (Alan Cox)
Thu Feb 1 04:54:12 1996
From: Alan Cox <alan@cymru.net>
To: jmorriso@multiactive.com (John Paul Morrison)
Date: Wed, 31 Jan 1996 09:57:56 +0000 (GMT)
Cc: jvichere@undergrad.math.uwaterloo.ca, linux-net@vger.rutgers.edu,
masq@indyramp.com
In-Reply-To: <199601302216.OAA00833@orange.ConcordPacific.Com> from "John Paul Morrison" at Jan 30, 96 02:16:53 pm
> It would be a good feature for masquerade to preserve privileged ports (or not - make it configurable).
> rlogin and rlogind use the privileged ports for "security" and stuff like .rhosts. It's not secure
> at all though.
It might be even better to educate users into things like ssh. rlogin via
masquerade raises some fascinating exploit opportunities in itself. It
wouldnt be hard for someone to tweak the masquerade code to reserve a few
'priviledged' ports for itself however.
Alan
