Securing the VOS Telnet Daemon

More documents

Recommendations

Info

Restricting connections with TCP Wrappers � Users that are denied will get connected and then disconnected • What they see will depend on their telnet client • Scanning programs will note that something is listening on the port since a TCP connection completes before the disconnect � >system>stcp>logs>tcpddeny file will list all denied connections • 12-04-25 15:42:11 mst telnetd: refused connect from myworkstation.stratus.com � Note the double “d” in the tcpddeny name � >system>stcp>logs>tcpdallow file will list all allowed connections • 12-04-25 15:08:58 mst telnetd: connect from yourworkstation.stratus.com 6
Restricting connections with TCP Wrappers � The hosts.allow and deny files are for all ports that telnetd is listening for • You cannot have a separate set for 1 port and a different set for another 7
Page 1 and 2: Securing the VOS Telnet Daemon Noah
Page 3 and 4: Background - why is the Telnet daem
Page 5: Restricting connections with TCP Wr
Page 9 and 10: Restricting connections with TCP Wr
Page 11 and 12: Selective listening with -local_ip
Page 13 and 14: Using SSH tunnels � When using an
Page 15 and 16: Using SSH tunnels C Telnetd Port 23
Page 17 and 18: Using SSH tunnels � Scanners will
Page 19 and 20: Using IPSec � ipsec.conf file •
Page 21 and 22: Using IPSec spd[2] spd index = 2 sa
Page 23 and 24: What not to do � Do not remove (o
Page 25 and 26: Questions? a = b a^2 = a*b a^2-b^2

Securing the VOS Telnet Daemon

Create successful ePaper yourself

Delete template?

Save as template?