Re: Securing telnet

2000-07-06 Thread John Galt
http://www.zip.com.au/~roca/ttssh.html On Tue, 4 Jul 2000, Sven Burgener wrote: > On Tue, Jul 04, 2000 at 01:23:49PM -0700, kmself@ix.netcom.com wrote: > > > I'd also look into ssh clients for Windows. I know there are Java > > clients available. > > I can recommend TeraTerm with the SSH exte

Re: Securing telnet

2000-07-06 Thread Alberto Rodríguez Ortega
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just PuTTY can be a good one too, check: http://www.chiark.greenend.org.uk/~sgtatham/putty/ At 22.32 4/7/00 +0200, Sven Burgener wrote: >On Tue, Jul 04, 2000 at 01:23:49PM -0700, kmself@ix.netcom.com wrote: > > > I'd also look into ssh clients for

Re: Securing telnet

2000-07-05 Thread Patrick Kirk
Hi all, It seems the answer is to use ipchains and not rely on tcpd. Many thanks for all the advice. As a short-term solution, I've dpkg -r'ed telnetd and the client now has Teraterm SSH on the LAN. Best regards, Patrick Kirk Mobile: 0044 (0) 705 004 9046

Re: Securing telnet

2000-07-04 Thread Morten Liebach
On Tue, Jul 04, 2000 at 01:23:49PM -0700, kmself@ix.netcom.com wrote: > On Tue, Jul 04, 2000 at 03:29:16PM +0100, Patrick Kirk wrote: > > Hi all, > > > > I've just installed a Debian server for a chap who insists on using > > telnet from Windows boxes within the LAN if he wants to login. I want >

Re: Securing telnet

2000-07-04 Thread Sven Burgener
On Tue, Jul 04, 2000 at 01:23:49PM -0700, kmself@ix.netcom.com wrote: > I'd also look into ssh clients for Windows. I know there are Java > clients available. I can recommend TeraTerm with the SSH extension for this. Forgot the link, search on google.com for it. Cheers -- S. Burgener Powered b

Re: Securing telnet

2000-07-04 Thread kmself
On Tue, Jul 04, 2000 at 03:29:16PM +0100, Patrick Kirk wrote: > Hi all, > > I've just installed a Debian server for a chap who insists on using > telnet from Windows boxes within the LAN if he wants to login. I want > to restrict this so that telnet can be done from the 10.0.0.0 range but > ssh c

Re: Securing telnet

2000-07-04 Thread Pollywog
On 04-Jul-2000 15:21:05 Patrick Kirk wrote: >> > Won't that mean that ssh from remote is DENYed? No, ssh is not run from inetd (unless you installed it to used inetd) AND telnetd and sshd don't use the same ports. -- Andrew

Re: Securing telnet

2000-07-04 Thread Jason E . Murray
I don't now right off hand if sshd that comes with debian is linked with the libtcp or not, but try not putting that in the /etc/hosts.allow and if you are denied access to ssh to the box, try putting: sshd: ALL in the /etc/hosts.allow. Also, does tcpd accept CIDR notiation now - I saw

Re: Securing telnet

2000-07-04 Thread Patrick Kirk
> You probably want to reverse that. Set hosts.deny to > ALL: PARANOID, and put something like: > > telnetd: 10.0.0/8 > > in hosts.allow. Add any other services running via > tcp-wrappers you need to allow here. AFAIK, sshd doesn't run from > inetd.conf, as installed by Debian.

Re: Securing telnet

2000-07-04 Thread K . Arun
> "Patrick" == Patrick Kirk <[EMAIL PROTECTED]> writes: Patrick> I have set hosts.deny as blank and hosts.allow as ALL: ALL Patrick> Any thoughts on how to set up the rules to allows the setup Patrick> above? You probably want to reverse that. Set hosts.deny to ALL: PARANOID, an

Re: Securing telnet

2000-07-04 Thread Patrick Kirk
> everything). > > In your hosts.allow you should have (in addition to anything else you have): > > in.telnetd: 10.0.0. > Won't that mean that ssh from remote is DENYed?

Re: Securing telnet

2000-07-04 Thread Jason E . Murray
Make sure you are using tcpd, look for a line simular to this in your /etc/inetd.conf file: telnet stream tcp nowait telnetd.telnetd /usr/sbin/tcpd /usr/sbin/in.telnetd The /usr/sbin/tcpd shows you are using tcpd. Now in your /etc/hosts.deny you should have ALL:ALL (To deny everyone access to

Re: Securing telnet

2000-07-04 Thread Michalowski Thierry
Why not try adding: telnet: 10. in your hosts.allow ? HTH Patrick Kirk wrote: > Hi all, > > I've just installed a Debian server for a chap who insists on using > telnet from Windows boxes within the LAN if he wants to login. I want > to restrict this so that telnet can be done from the 10.0.0.0

Re: Securing telnet

2000-07-04 Thread Patrick Kirk
What I was hoping is that there's a file along the lines of the named.conf that restricts the telnet service to either a particular IP range or to a particular interface. Best regards, Patrick Kirk Mobile: 0044 (0) 705 004 9046

Re: Securing telnet

2000-07-04 Thread Thomas Guettler
you could use ipchains, there is a howto about it. But maybe someone has a easier solution On Tue, Jul 04, 2000 at 03:29:16PM +0100, Patrick Kirk wrote: > Hi all, > > I've just installed a Debian server for a chap who insists on using > telnet from Windows boxes within the LAN if he wants to