Access control for telnet and ftp

aroop · 08-26-2004, 02:25 AM

Can someone tell me how to control the telnet and ftp access to a Red Hat Machine?
I want to know how to ensure that the machine accepts telnet and ftp from only a particular range of IP addresses.
Thanks,

masand · 08-26-2004, 06:07 AM

hi
there i haven't done this before but i think u can have a look at
/etc/hosts.allow, /etc/hosts.deny

regards

chrism01 · 08-26-2004, 06:34 AM

I'd strongly recommend using ssh/scp/sftp instead.... You do know that ftp, telnet (and the r* cmds) send usernames/pwds/data unencrypted ?

aroop · 08-27-2004, 03:32 AM

I got the solution. Editing /etc/hosts.allow and /etc/hosts.deny works only with tcpd working along with xinetd.
For simply controlling access to telnet and ftp, I edited the files /etc/xinetd.d/telnet and /etc/xinetd.d/gssftp and included aline something like this:

only_from = 20.43.0.0

This allowed telnet/ftp only from the network specified and denied access from other networks.

bruj3w · 08-27-2004, 04:24 AM

why use telnet?

masand · 08-27-2004, 04:35 AM

hi
i too agree
use ssh instead

regards

aroop · 08-27-2004, 09:50 AM

Can someone tell me how to set up ssh?

masand · 08-27-2004, 10:00 AM

hey
u just ned to start the ssh service ,if ssh installed

and use from remote machine as

ssh [-l login_name] hostname | user@hostname [command]

regards

chrism01 · 08-27-2004, 04:24 PM

ssh comes as std on RH9, so just use
service sshd restart
(it may already be running).
and don't forget to set it on the Services menu as well so it restarts on next boot.
Remember to set
PermitRootLogin no
in /etc/ssh/sshd_config