[6134] in RedHat Linux List
Re: How to REJECT telnetting
daemon@ATHENA.MIT.EDU (Mick Ghazey)
Mon Nov 25 23:57:40 1996
From: "Mick Ghazey" <mghazey@miso.lowdown.com>
To: manders@sirius.com (C M)
Date: Mon, 25 Nov 1996 23:34:25 +0000
Reply-to: mGhazey@lowdown.com
CC: redhat-list@redhat.com
X-Confirm-Reading-To: mGhazey@lowdown.com
Resent-From: redhat-list@redhat.com
On 25 Nov 96 at 11:20, manders@sirius.com (wrote:
> Hi all,
>
> I'm looking for a simple way to reject telnetters that try to telnet into my
> system that are also both valid and non users and perhaps have other
> priveledges. Also I want to display a message that it is not allowed and log
> the attempt.
>
> Any ideas?
/etc/hosts.allow and /etc/hosts.deny control access to inetd
functions.
-------------------------
hosts.deny:
#
# hosts.deny This file describes the names of the hosts which are
# *not* allowed to use the local INET services, as
# decided by the '/usr/sbin/tcpd' server.
#
ALL: ALL
--------------------------
Above denies all users from all inetd functions unless allowed by
hosts.allow.
--------------------------
hosts.allow:
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided by
# the '/usr/sbin/tcpd' server.
#
ALL: .domain1.com .domain2.com
ALL: 123.45.67.
in.telnetd in.ftpd in.fingerd in.cfingerd ipop2d ipop3d in.talkd\n
in.ntalkd: ALL except .naughty.net
----------------------------
Above allows all users from domain1.com, domain2.com, and any ip in
123.45.67.[0-255] access to all inetd functions.
All users can use user telnet, ftp, etc. except for naughty.net.
All attempts to connect are logged. A user that doesn't have
permission to use a function is so informed.
Permission can be granted/denied on a user basis. See man
hosts.allow.
Mick
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
