topic Re: restrict access by node in Operating System - HP-UX

restrict access by node

Victor Makarov — Mon, 31 Jul 2000 09:45:05 GMT

Can I restrict access to my HPUX 11.X system from a list of hosts (by name or by IP address) and give access to other list of hosts?
I need to allow/disallow access not by certain service (ftpd, sendmail...) but to any service that can run on my system now or in the future at once.
Thanks in advance,
Victor

Re: restrict access by node

Andreas Voss — Mon, 31 Jul 2000 09:51:31 GMT

Hi,

think you have to modify your /var/adm/inetd.sec (of course service based).

Regards

Andrew

Re: restrict access by node

Brian M. Fisher — Mon, 31 Jul 2000 11:40:06 GMT

You are able to have the control you desire by setting up the /var/adm/inetd.sec file.

man inetd.sec

This file is setup as follows:
service_name allow/deny host/network_address, host/network_names

i.e.
ftp allow 90.103

This would only allow connections to ftp from the 90.103.X.X network.

Brian
<*(((>< er

Re: restrict access by node

alberto vasquez — Wed, 02 Aug 2000 15:51:46 GMT

you can allow/deny services to hosts (by ip or hostname) by putting it in the /var/adm/inetd.sec file.

Re: restrict access by node

Shannon Petry — Wed, 02 Aug 2000 22:44:48 GMT

NOTE on configuring inetd.sec.
If you are new to admin, then use SAM to configure the file for you. Launch sam, and then look for the icon for "networking and communications", then "system access".
From there, you can either configure "remote logins" which will modify $HOME/.rhosts and /etc/hosts.equiv, or go to "Internet Services", which is every other service, including printing, mountd, ftp, shell, telnet, and more!
Again, if you are new to admin of HP-UX, you may have reservations about modifying files by hand. Sam does a pretty good job of this for you.

Best Regards!
Shannon

Re: restrict access by node

Franz F. Steininger — Tue, 22 Aug 2000 06:48:24 GMT

with HPUX 10.20 you may configure the routing. I do not know if it is the same with HPUX 11.x.
disable default(route) in /etc/rc.config.d/netconf
and enter an entry for every net or host you want to allow access to your host.
you do not have to allow or disallow every service for every network/host ....