Operating System - HP-UX
1833696 Members
3519 Online
110062 Solutions
New Discussion

Re: How to block telnet access to root

 
Guna_2
Regular Advisor

How to block telnet access to root

Dear all,

Because of some some securitty requirement i want to block the telnet access to root user. As well as i want to allow telnet access from only some particullar ip.

how i can to do this

Please give me some tips

Regards,
M.Guna
4 REPLIES 4
Peter Godron
Honored Contributor

Re: How to block telnet access to root

Hi,
you can reverse the code of this thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=995109
or use:
http://forums1.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=1053025

Both use similar idea of /etc/profile change.
The same can be used for your IPaddress requirement, with more ideas in:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1045600
Ninad_1
Honored Contributor

Re: How to block telnet access to root

For blocking root access from any other terminals other than console - you can use the /etc/securettys file - create this file/edit thie file and write console in it - this will allow root login only from console
To restrict telnet access only from certain ip addresses - you can use /etc/inetd.sec file and mention something like this
telnet allow 192.178.6.* srv1 srv2 ...

refer to man inetd.sec for more info.

Regards,
Ninad
Fabian Briseño
Esteemed Contributor

Re: How to block telnet access to root

Hello.
You can acomplish allowing telnet access from only some particullar ip by editing your inetd.sec file

here you can configure from what IP'S can someone log on, for example

you can allow every connection from 102.105.58.*

or only allow telnet from
102.105.65.25


The first question i dont know, you could install secure shell and disable telnet, if you do this SSH would take the place of telnet and besides SSH is more secure.

hope this helps
Knowledge is power.
Guna_2
Regular Advisor

Re: How to block telnet access to root

Thankx to all