topic Re: banner set-up in Operating System - HP-UX

banner set-up

Edgar_10 — Wed, 10 Sep 2003 13:02:09 GMT

Hi All,

What file need i edit/create to display the hostname being accessed before the user is prompted with the login prompt during a telnet/rlogin session?

Thanks in advance!

Re: banner set-up

Steven E. Protter — Wed, 10 Sep 2003 13:03:15 GMT

The file that displays befoer a telnet login is /etc/issue

SEP

Re: banner set-up

Pete Randall — Wed, 10 Sep 2003 13:09:37 GMT

Edgar,

For telnet, modify the telnetd entry in /etc/inetd.conf (see man telnetd):

telnet stream tcp nowait root /usr/lbin/telnetd telnetd -b

/etc/issue may work for rlogin - not sure.

Pete

Re: banner set-up

Massimo Bianchi — Wed, 10 Sep 2003 13:15:17 GMT

Hi, for telnet you already have the answer, for rlogin add the followinf line in /etc/inetd.conf:

/usr/lbin/rlogind [-lns] [-B bannerfile]

thanks to "man rlogind"

Re: banner set-up

Paula J Frazer-Campbell — Wed, 10 Sep 2003 13:19:33 GMT

When using /etc/issue - do not put a welcome message i.e. "Welcome to ABCD PLC" as there has alledgely been a case where a hacker got away with it because his defence was "It said welcome so I presumed I was". The judge being not exactly computer literate dismissed the case.

Also do not announce the OS as this again gives the potential hacker more information.

Your etc/issue could contain something like this

-------WARNING------
YOUR CONNECTION TO THIS MACHINE
WILL BE MONITORED AND RECORDED.
UNAUTHORISED USE OR OVER
AUTHORISED USE OF THIS SYSTEM
IS FORBIDDEN.

HTH

Paula

Re: banner set-up

Jeff Schussele — Wed, 10 Sep 2003 13:20:04 GMT

Hi,

The file is, as Pete noted, whatever follows the -b parameter on the /etc/inetd.conf line for telnet.

BUT - I would STRONGLY encourage you not to advertise the host name this way. Hackers love this, they may get an IP & have NO clue what the host is. This will give it to them on a silver platter.
The only thing that should be displayed in a banner is a legal warning about what users can & can't do, that they will be monitored & criminal activities will result in prosecution - period.

You never want to advertise hostnames nor OS types in banners - never.

My 2 cents,
Jeff

Re: banner set-up

Edgar_10 — Thu, 11 Sep 2003 14:03:59 GMT

Hi All,

Ive setup the banner display but how would is display the following in BOLD HIGHLIGHTED font - WARNING AUTHORISED ACCESS ONLY - to be displayed?

Thanks in advance!

Re: banner set-up

Massimo Bianchi — Thu, 11 Sep 2003 14:28:54 GMT

Hi,
it was with the old terminal ascii art and nice finger, animations. I had one of them at university...

Check these link and find your inspiration!

http://www.geocities.com/SoHo/2695/links.htm#animations

http://llizard.crosswinds.net/ascii-art/animation/animframe.htm

(found by a goggle search with "ascii art" "ascii animations")

Massimo

Re: banner set-up

Massimo Bianchi — Thu, 11 Sep 2003 14:32:05 GMT

NO POINTS

i lothe these:

http://grox.net/misc/vt/

NO POINTS

Massimo

Re: banner set-up

Sergejs Svitnevs — Thu, 11 Sep 2003 14:59:33 GMT

/etc/issue contains:

^[[1m WARNING AUTHORISED ACCESS ONLY ^[[m

where:
^[[1m is CTRL-V CTRL-[ [ 1 m
^[[m is CTRL-V CTRL-[ [ m

Regards,
Sergejs