can someone please help with telnet ???

I'm trying to limit telnet access to a server to one i.p. address, can
someone help with this ?
Am I able to use the /etc/hosts.allow & /etc/hosts.deny files for this
the same as I would the sshd ?

thanks...

On 2005-11-02, dorantes@mac.com <dorantes@mac.com> wrote:
> I'm trying to limit telnet access to a server to one i.p. address, can
> someone help with this ?
> Am I able to use the /etc/hosts.allow & /etc/hosts.deny files for this
> the same as I would the sshd ?

It depends: which telnetd; standalone, from inetd, or from xinetd;
what's in the config files, if from inetd or xinetd; and which if any
have been compiled with tcpwrapper support?

The obligatory question for cols: Why do you need telnetd support? Can
you use sshd or some other service instead?

--keith

--
kkeller-usenet@wombat.san-francisco.ca.us
(try just my userid to email me)
AOLSFAQ=http://wombat.san-francisco.ca.us/cgi-bin/fom
see X- headers for PGP signature information

xinetd

service telnet
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/in.telnetd
log_on_failure += USERID
}

Keith Keller wrote:
> On 2005-11-02, dorantes@mac.com <dorantes@mac.com> wrote:
>
>>I'm trying to limit telnet access to a server to one i.p. address, can
>>someone help with this ?
>>Am I able to use the /etc/hosts.allow & /etc/hosts.deny files for this
>>the same as I would the sshd ?
>
>
> It depends: which telnetd; standalone, from inetd, or from xinetd;
> what's in the config files, if from inetd or xinetd; and which if any
> have been compiled with tcpwrapper support?
>
> The obligatory question for cols: Why do you need telnetd support? Can
> you use sshd or some other service instead?
>
> --keith
>
If you need to use telnet, why not just use iptables to allow/deny telnet?

iptables -I INPUT -s xxx.xxx.xxx.xxx -p tcp --dport 23:23 -j DROP

iptables -I INPUT -s xxx.xxx.xxx.xxx -p tcp --dport 23:23 -j ACCEPT

....etc...


-D

On 2 Nov 2005 16:47:30 -0800, "dorantes@mac.com" <dorantes@mac.com>
wrote:

>xinetd
>
>service telnet
>{
> disable = no
> flags = REUSE
> socket_type = stream
> wait = no
> user = root
> server = /usr/sbin/in.telnetd
> log_on_failure += USERID
>}


man xinetd.conf and check out only_from
add a rule into your firewall
add a rule in tcpwrappers
--

Benway