Securing the VOS Telnet Daemon

More documents

Recommendations

Info

Selective listening with –local_ip � If forwarding is enabled it is possible that a host on another local network could also make the connection by using the module to route between a public network and the maintenance network • Unless you have a really good reason to have forwarding enabled (its is on by default) you should turn it off IP_forwarding ipForwarding ON ready 14:36:38 IP_forwarding off ipForwarding OFF • Need to run the command twice (see stcp-3055) for it to take effect 12
Using SSH tunnels � When using an SSH tunnel you configure telnetd to listen only to localhost (127.0.0.1) telnet window_term "keepalive nodelay" "SSH Tunnel Connections" 1 + 1 tli_login.m17 "-local_ip 127.0.0.1“ netstat –numeric –all_sockets . . . . . tcp 0 0 127.0.0.1:23 *:* LISTEN . . . . . � Scanners will not see anything listening on port 23 but they will detect sshd on port 22 13
Page 1 and 2: Securing the VOS Telnet Daemon Noah
Page 3 and 4: Background - why is the Telnet daem
Page 5 and 6: Restricting connections with TCP Wr
Page 11: Selective listening with -local_ip
Page 15 and 16: Using SSH tunnels C Telnetd Port 23
Page 17 and 18: Using SSH tunnels � Scanners will
Page 19 and 20: Using IPSec � ipsec.conf file •
Page 21 and 22: Using IPSec spd[2] spd index = 2 sa
Page 23 and 24: What not to do � Do not remove (o
Page 25 and 26: Questions? a = b a^2 = a*b a^2-b^2

Securing the VOS Telnet Daemon

Create successful ePaper yourself

Delete template?

Save as template?