Re: [cobalt-users] Wrapping Telnet

["Brian Curtis" <webmaster@xxxxxxxxxxx>]

Jossi,

> I need to wrap Telnet access so only specific IP addresses can gain root
> access. I need this so I can telnet remotely. How do you do this? I don;t
> want to keep Telnet open with root access due to security.

Put the following in /etc/hosts.deny:

in.telnetd: ALL

Then the following in /etc/hosts.allow:

in.telnetd: 192.168.1.2,machine.your.domain

This turns off telnet access for 'ALL', then enables it for specific IP #s /
hosts.  If you are connecting from an ISP which assigns dynamic IP #s, use
partial IPs and hosts in hosts.allow.  ex:

in.telnetd: 192.168.1.,.isp.com

Notice the IP ends with a '.' and the hostname begins with a '.', allowing
192.168.1.* and *.isp.domain.  You can add as many IP/host names as needed
by separating them with a comma.

Be careful implementing the above - you can easily lock yourself out of the
box via telnet if you enter the wrong IP # or host name.

Brian Curtis