restrict access by node

[Victor Makarov]

Can I restrict access to my HPUX 11.X system from a list of hosts (by name or by IP address) and give access to other list of hosts?
I need to allow/disallow access not by certain service (ftpd, sendmail...) but to any service that can run on my system now or in the future at once.
Thanks in advance,
Victor

[Andreas Voss]

Hi,

think you have to modify your /var/adm/inetd.sec (of course service based).

Regards

Andrew

[Brian M. Fisher]

You are able to have the control you desire by setting up the /var/adm/inetd.sec file.

man inetd.sec

This file is setup as follows:
service_name allow/deny host/network_address, host/network_names

i.e.
ftp allow 90.103

This would only allow connections to ftp from the 90.103.X.X network.

Brian
<*(((>< er

[alberto vasquez]

you can allow/deny services to hosts (by ip or hostname) by putting it in the /var/adm/inetd.sec file.

[Shannon Petry]

NOTE on configuring inetd.sec.
If you are new to admin, then use SAM to configure the file for you. Launch sam, and then look for the icon for "networking and communications", then "system access".
From there, you can either configure "remote logins" which will modify $HOME/.rhosts and /etc/hosts.equiv, or go to "Internet Services", which is every other service, including printing, mountd, ftp, shell, telnet, and more!
Again, if you are new to admin of HP-UX, you may have reservations about modifying files by hand. Sam does a pretty good job of this for you.

Best Regards!
Shannon

[Franz F. Steininger]

with HPUX 10.20 you may configure the routing. I do not know if it is the same with HPUX 11.x.
disable default(route) in /etc/rc.config.d/netconf
and enter an entry for every net or host you want to allow access to your host.
you do not have to allow or disallow every service for every network/host ....