topic How to restrict telnet and ftp access by IP address in Operating System - HP-UX

How to restrict telnet and ftp access by IP address

Aji Thomas — Thu, 15 Sep 2005 09:47:38 GMT

Hi guys,
I would like to know how to restrict telnet and ftp access by IP.

I can provide a list of valid IP's which should be able to login to telnet and ftp sessions.

please advice as we are trying to implement security.

regards,
Aji

Re: How to restrict telnet and ftp access by IP address

Orhan Biyiklioglu — Thu, 15 Sep 2005 09:51:03 GMT

check the inetd.sec file

man inetd.sec

you can also use tcpwrappers for this purpose by it is not installed by default.

Re: How to restrict telnet and ftp access by IP address

Orhan Biyiklioglu — Thu, 15 Sep 2005 09:53:22 GMT

the format of the inetd.sec file is as follows:

examples

telnet allow 10.* 192.168.*
ftp allow 10.* 192.168.*

Re: How to restrict telnet and ftp access by IP address

Fabio Ettore — Thu, 15 Sep 2005 09:55:29 GMT

Hi Aji,

just insert the following lines into /var/adm/inetd.sec:

telnet deny
ftp deny

For more examples and forms see section EXAMPLES in man inetd.sec.

HTH.

Best regards,
Fabio

Re: How to restrict telnet and ftp access by IP address

Fabio Ettore — Thu, 15 Sep 2005 09:56:36 GMT

...and you haven't to restart any daemons because the changes are effectively immediately.

Best regards,
Fabio

Re: How to restrict telnet and ftp access by IP address

Raj D. — Thu, 15 Sep 2005 09:58:14 GMT

Hi Aji ,

Its /var/adm/inetd.sec

You can put like this :

login allow 10.* 192.54.24.5

Check #man inetd.sec for further.

Cheers,
Raj.

Re: How to restrict telnet and ftp access by IP address

Raj D. — Thu, 15 Sep 2005 10:00:38 GMT

Aji ,

You can put

telnet deny and ftp deny with IP address.

in /var/adm/inetd.sec

telnet deny IP
ftp deny IP

Cheers,
Raj.

Re: How to restrict telnet and ftp access by IP address

Alessandro Pilati — Thu, 15 Sep 2005 10:03:14 GMT

As correctly said by the other forumers you can managet inetd.sec file, or you could use also IP-Filter ( less simple ):

http://www.obfuscation.org/ipf/ipf-howto.txt

Regards,
Alex

Re: How to restrict telnet and ftp access by IP address

Aji Thomas — Thu, 15 Sep 2005 11:07:16 GMT

Hi guys,

thanks fot the update,
It worked dynamically.

thanks,
AJi