| View previous topic :: View next topic |
| Author |
Message |
iarkin
n00b
Joined: 04 Apr 2003
Posts: 18
Location: Left at Sirius, second star to the right
|
 Posted: Wed Apr 09, 2003 2:24 pm Post subject: telnet and hosts.(allow/deny) |
 |
|
Hello folks
I'm setting up a BBS that uses telnet as means for accessing it. Now we all know that telnet isn't the best alternative out there when it comes to security.
So my idea is to create a user called 'bbs-user', that has no password and that when logged in on telnets you to localhost
| Code: | /etc/passwd:
bbs-user:x:1004:65533:,,,:/:/usr/bin/telnet -l bbs -E localhost |
problem is, to use this i still have to run a telnetd on my machine.
The question is, how do i mod my hosts.allow and hosts.deny to only allow telnet connections from localhost? This without allowing users form telia.com and chalmers.se to telnet to my machine.
| Code: | /etc/hosts.allow:
ALL: .chalmers.se
ALL: .telia.com |
| Code: | etc/hosts.deny:
ALL: PARANIOD |
Thanks
/iarkin |
|
| Back to top |
|
 |
rtn
Guru
Joined: 15 Nov 2002
Posts: 427
|
| Posted: Wed Apr 09, 2003 3:18 pm Post subject: |
|
|
LOCAL is a tcp wrapper alias for localhost, you can use that.
However, you have a greater problem then that - you can send a break
to a telnet session, which would allow these unauthenticated users to open
new tcp connections from your server. Not a terrific idea.
--rtn |
|
| Back to top |
|
|
iarkin
n00b
Joined: 04 Apr 2003
Posts: 18
Location: Left at Sirius, second star to the right
|
| Posted: Wed Apr 09, 2003 3:28 pm Post subject: |
|
|
| rtn wrote: | | LOCAL is a tcp wrapper alias for localhost, you can use that. |
okay, how? 
| rtn wrote: |
However, you have a greater problem then that - you can send a break
to a telnet session, which would allow these unauthenticated users to open
new tcp connections from your server. Not a terrific idea.
|
Well, that's what the '-E' flag does (i hope  ) form man telnet
| Code: | | -E Stops any character from being recognized as an escape character. |
/iarkin[/quote] |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
