topic Re: ssh/telnet connection message in Operating System - HP-UX

ssh/telnet connection message

Xavi Segura_1 — Thu, 23 Feb 2006 06:24:35 GMT

Hi,

I've installed ssh in my hpux box 11i and I disabled the telnet connection in the inetd.sec, all run ok, but I want to show a message when somobody try to connect via telnet like:
"telnet connections are not allowed, use SSH"

Is possible to configure it??

Thansk and sorry for my poor english

Re: ssh/telnet connection message

Muthukumar_5 — Thu, 23 Feb 2006 06:30:46 GMT

If you are using /var/adm/inetd.sec file then you are able to show the message like this. You can try like,

Edit /etc/profile,

ps | grep -q 'telnet'
if [[ ${?} -eq 0 ]]
then
echo "telnet connections are not allowed, use SSH"
sleep 3
exit 1
fi

Save the file and try. IT will give you this option.

--
Muthu

Re: ssh/telnet connection message

Arunvijai_4 — Thu, 23 Feb 2006 06:35:50 GMT

Hello,

You can do it via /etc/profile or .profile..

-Arun

Re: ssh/telnet connection message

Xavi Segura_1 — Thu, 23 Feb 2006 06:54:28 GMT

thanks for your reply, but this method show the message after the user type the user/password and refussed the connection.

I want to show the messageand refussed the connection before the user type the user/password.

Thanks for your reply again.

Re: ssh/telnet connection message

Arunvijai_4 — Thu, 23 Feb 2006 06:58:06 GMT

Hello,

You can try /etc/issue /etc/banner , putting the message ..

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=503331

-Arun

P.S Remember to assign poinits.

Re: ssh/telnet connection message

Muthukumar_5 — Thu, 23 Feb 2006 07:20:06 GMT

I hope when you disable telnet connection then /etc/banner or /etc/issue will not work to the user. May be you can try with tcpwrapper to block telnet based connection and to show the information before prompting for Login / Password.

--
Muthu

Re: ssh/telnet connection message

Muthukumar_5 — Thu, 23 Feb 2006 07:21:15 GMT

TCPWRAPPER is available as,

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=TCPWRAP

It is free more. You can try with that.

--
Muthu

Re: ssh/telnet connection message

Xavi Segura_1 — Thu, 23 Feb 2006 07:28:28 GMT

hi,

With /etc/issue or /etc/banner can modify the telnet message, but I can't refuse the connection and show the message, before the system show the login prompt.

I need this:

When user try to connect via telnet to my server, the system doesn't show a login prompt, only show a customized message and refuse the connection.

Thanks a lot.

Re: ssh/telnet connection message

Jean-Yves Picard — Thu, 23 Feb 2006 08:26:06 GMT

hello,

just a tought,
how about replacing

telnet stream tcp nowait root /usr/lbin/telnetd telnetd

in inetd.conf by

telnet stream tcp nowait root /usr/bin/echo echo telnet session are not allowed please use ssh

(all in one line of course)

Jean-Yves Picard