how to restrict the access of telnet and ftp?

[hy_4]

OS is digital v4 and tru64 v5.I want to restrict the access of telnet and ftp of some ip address.How should I do?Thank you.

[Eric van Dijken · Accepted solution]

On Tru64 5.1B you could install IAETCPW600 (A TCP Wrapper) from the Internet Express Kit cdrom.

This would allow you to use /etc/hosts.allow which is a (very) good way to restrict telnet and ftp access.

[hy_4]

Thank you.Then what should I do on digital v4 and Tru64 v5.1a?

[Eric van Dijken]

My best guess would be to find a suitable tcpwrapper for those versions aswell.

But i have never worked with those versions, so i can't help ye there.

[Ralf Puchner]

maybe screend may be an issue (man screend)

[hy_4]

Thank you.Can any one give me other suggestions?

[Peter Leddy_1]

Hi,

tcp_wrappers is included in the Open Source Software Collection for Tru64 v5.1A see this link - http://h30097.www3.hp.com/demos/ossc/html/README.htm and you can download the rpm for here too.

You will need rpm installed first which you can get from here and it's compatible with 5.1A(as far as I know) - http://h30097.www3.hp.com/demos/ossc/html/OSSCV51B.htm but be aware the HP does not support RPM so it's at your own risk.

HTH,

Peter

[Ross Minkov]

Also check out /etc/ftpusers - the ftpd security file

The ftpd security file rejects remote logins to local user accounts speci-
fied in /etc/ftpusers. Restricted accounts appear one to a line; white
space is prohibited. Account names must match exactly the user account
name in the /etc/passwd file. If the file does not exist, ftpd does not do
security checks.

EXAMPLES

The following are sample entries in an /etc/ftpusers file:

root
guest
ftp
user1
UUCP

[hy_4]

Could you please tell me what the RPM is?And please give me a detailed use of the tcp_wrappers. Thank you!

[Ralf Puchner]

RPM is Redhat-Package Standard. If entering RPM within google you will get the right answer ;-)

Have a look to the Tru64 download page for RPM (link was given here serveral times).

And an description for the tcp_wrappers is within the Tru64 manual or if using the opensource version within the internet by simple entering "tcp_wrapper" into google....

I'm just wondering why repeating all the stuff again and again if it well documented and information is within a few clicks...