> Resent-Cc: 
> MBOX-Line: From [EMAIL PROTECTED]  Fri Jun 30 14:47:07 2000
> From: "John Gao" <[EMAIL PROTECTED]>
> 
> It there a way to stop people from telnet the server remotely ( i.e
> internet user) but only allow user to do
> it through local area net work?
> 
> Thanks
> 
> John

Of course :-)

A start it to use /etc/hosts.allow and /etc/hosts.deny

man hosts.allow for lots of details

A simple version:
/etc/hosts.deny contains:
ALL:ALL

/etc/hosts.allow contains something like:
ALL: 192.168.1.

(this is what I have at home where my local network is 192.168.1.x so
that all local machines can use all services on the system)

You can also filter packets at the kernel level (probably a little
more secure than hosts.allow/deny but takes more reading to figure out
how to set it up).

You'll want to read the IP-Chains HOWTO and Firewall HOWTO.

HTH,
Dave



-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to