[SunHELP] Restricting telnet and ftp

Tue Jul 31 06:59:40 CDT 2001

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C119B8.4777B970
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Would TCP Wrapper be of some help here.

Dennis L. Lund

-----Original Message-----
From: DAUBIGNE Sebastien - BOR [mailto:Sebastien.DAUBIGNE at sema.fr]
Sent: Tuesday, July 31, 2001 5:39 AM
To: sunhelp at sunhelp.org
Subject: RE: [SunHELP] Restricting telnet and ftp

# man ftpd
[...]
Second, if the user name appears in the file  /etc/ftpusers,
ftp access is denied.
[...]

Don't know for any way to restrict  telnet acces on user basis.
You can however disable login on this account : just replace the encrypted
password in /etc/shadow with "NP".
Note that it doesn't disable access to the account from root with "su" (to
do so, just put an invalid shell in /etc/passwd (e.g. /bin/false)).

---
Sebastien DAUBIGNE=20
sebastien.daubigne at sema.fr - 05.57.26.56.36
Sema Global Services - AFM/DW/Pessac

	-----Message d'origine-----
	De:	MUHAMED, Mohd. Khairul [SMTP:khairul_muhamed at astro.com.my]
	Date:	mardi 31 juillet 2001 05:57
	=C0:	sunhelp at sunhelp.org
	Objet:	[SunHELP] Restricting telnet and ftp

	Hello everyone,=20

	Can someone help me on this.=20

	What is the Solaris equivalent to HP-UX's telnet.allow, telnet.deny,
ftp.allow and ftp.deny?=20

	Are there files that are used to restrict ids from telnet and ftp? =20

	Regards,=20
	    Mohd Khairul Muhamed=20
	    =20
=09
_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp

<html>
<body>
<font size=3D"3" face=3D"Times New Roman"><span style=3D"mso-fareast-font-f=
amily: Times New Roman; mso-ansi-language: EN-US; mso-fareast-language: EN-=
US; mso-bidi-language: AR-SA">
- - - - - - - Appended by Scientific-Atlanta, Inc. - - - - - - -
<span style=3D"font-size:10.0pt;font-family:Times New Roman;
mso-fareast-font-family:"Times New Roman";mso-ansi-language:EN-US=
;mso-fareast-language:
EN-US;mso-bidi-language:AR-SA"></span><font face=3D"Times New Roman" size=
=3D"3"><span style=3D"mso-fareast-font-family:Times New Roman; mso-ansi-lan=
guage: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">This e=
-mail and any attachments may contain information which is confidential, pr=
oprietary, privileged or otherwise protected by law. The information is sol=
ely intended for the named addressee (or a person responsible for deliverin=
g it to the addressee). If you are not the intended recipient of this messa=
ge, you are not authorized to read, print, retain, copy or disseminate this=
 message or any part of it. If you have received this e-mail in error, plea=
se notify the sender immediately by return e-mail and delete it from your c=
omputer.</span></font></p>
</body>
</html>

------_=_NextPart_001_01C119B8.4777B970
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Diso-8859-=
1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version 5.5.2654.45">
<TITLE>RE: [SunHELP] Restricting telnet and ftp</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Would TCP Wrapper be of some help here.</FONT>
</P>

<P><FONT SIZE=3D2>Dennis L. Lund</FONT>
</P>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: DAUBIGNE Sebastien - BOR [<A HREF=3D"mailto:Sebast=
ien.DAUBIGNE at sema.fr">mailto:Sebastien.DAUBIGNE at sema.fr</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Tuesday, July 31, 2001 5:39 AM</FONT>
<BR><FONT SIZE=3D2>To: sunhelp at sunhelp.org</FONT>
<BR><FONT SIZE=3D2>Subject: RE: [SunHELP] Restricting telnet and ftp</FONT>
</P>
<BR>

<P><FONT SIZE=3D2># man ftpd</FONT>
<BR><FONT SIZE=3D2>[...]</FONT>
<BR><FONT SIZE=3D2>Second, if the user name appears in the file  /etc/=
ftpusers,</FONT>
<BR><FONT SIZE=3D2>ftp access is denied.</FONT>
<BR><FONT SIZE=3D2>[...]</FONT>
</P>

Don't know for any way to restrict  telnet acces on =
user basis.
 You can however disable login on this account : just rep=
lace the encrypted
 password in /etc/shadow with "NP".
 Note that it doesn't disable access to the account from =
root with "su" (to
 do so, just put an invalid shell in /etc/passwd (e.g. /b=
in/false)).

<P><FONT SIZE=3D2>---</FONT>
<BR><FONT SIZE=3D2>Sebastien DAUBIGNE </FONT>
<BR><FONT SIZE=3D2>sebastien.daubigne at sema.fr - 05.57.26.56.36</FONT>
<BR><FONT SIZE=3D2>Sema Global Services - AFM/DW/Pessac</FONT>
</P>
<BR>

<P>        <FONT SIZE=3D2>-----Message d=
'origine-----</FONT>
<BR>        <FONT SIZE=3D2>De: &nbs=
p;   MUHAMED, Mohd. Khairul [SMTP:khairul_muhamed at astro.com.my]</=
FONT>
<BR>        <FONT SIZE=3D2>Date: &n=
bsp; mardi 31 juillet 2001 05:57</FONT>
<BR>        <FONT SIZE=3D2>=C0: &nb=
sp;    sunhelp at sunhelp.org</FONT>
<BR>        <FONT SIZE=3D2>Objet:  =
[SunHELP] Restricting telnet and ftp</FONT>
</P>

<P>        <FONT SIZE=3D2>Hello everyone=
, </FONT>
</P>

Can someone he=
lp me on this.

What is the So=
laris equivalent to HP-UX's telnet.allow, telnet.deny,
 ftp.allow and ftp.deny?

<P>        <FONT SIZE=3D2>Are there file=
s that are used to restrict ids from telnet and ftp?  </FONT>
</P>
<BR>
<BR>
<BR>
<BR>

<P>        <FONT SIZE=3D2>Regards, </FON=
T>
<BR>        <FONT SIZE=3D2>  &=
nbsp; Mohd Khairul Muhamed </FONT>
<BR>        <FONT SIZE=3D2>  &=
nbsp;  </FONT>
<BR>       =20
<BR><FONT SIZE=3D2>_______________________________________________</FONT>
<BR><FONT SIZE=3D2>SunHELP maillist  -  SunHELP at sunhelp.org</FONT>
<BR><FONT SIZE=3D2><A HREF=3D"http://www.sunhelp.org/mailman/listinfo/sunhe=
lp" TARGET=3D"_blank">http://www.sunhelp.org/mailman/listinfo/sunhelp</A></=
FONT>
</P>

<CODE><FONT SIZE=3D3><BR>
<BR>
<html><BR>
<body><BR>
<font size=3D"3" face=3D"Times New Roman"><span style=3D"mso-fareast-font-f=
amily: Times New Roman; mso-ansi-language: EN-US; mso-fareast-language: EN-=
US; mso-bidi-language: AR-SA"><BR>
- - - - - - - Appended by Scientific-Atlanta, Inc. - - - - - - -<BR>
<span style=3D"font-size:10.0pt;font-family:Times New Roman;<BR>
mso-fareast-font-family:"Times New Roman";mso-ansi-language:EN-US=
;mso-fareast-language:<BR>
EN-US;mso-bidi-language:AR-SA"></span><font face=3D"Times New Roman" size=
=3D"3"><span style=3D"mso-fareast-font-family:Times New Roman; mso-ansi-lan=
guage: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">This e=
-mail and any attachments may contain information which is confidential, pr=
oprietary, privileged or otherwise protected by law. The information is sol=
ely intended for the named addressee (or a person responsible for deliverin=
g it to the addressee). If you are not the intended recipient of this messa=
ge, you are not authorized to read, print, retain, copy or disseminate this=
 message or any part of it. If you have received this e-mail in error, plea=
se notify the sender immediately by return e-mail and delete it from your c=
omputer.</span></font></p><BR>
</body><BR>
</html><BR>
</FONT></CODE></BODY>
</HTML>
------_=_NextPart_001_01C119B8.4777B970--