How to restrict telnet and ftp access by IP address

[Aji Thomas]

Hi guys,
I would like to know how to restrict telnet and ftp access by IP.

I can provide a list of valid IP's which should be able to login to telnet and ftp sessions.

please advice as we are trying to implement security.

regards,
Aji

[Orhan Biyiklioglu]

check the inetd.sec file

man inetd.sec

you can also use tcpwrappers for this purpose by it is not installed by default.

[Orhan Biyiklioglu · Accepted solution]

the format of the inetd.sec file is as follows:



examples

telnet allow 10.* 192.168.*
ftp allow 10.* 192.168.*

[Fabio Ettore]

Hi Aji,

just insert the following lines into /var/adm/inetd.sec:

telnet deny
ftp deny

For more examples and forms see section EXAMPLES in man inetd.sec.

HTH.

Best regards,
Fabio

[Fabio Ettore]

...and you haven't to restart any daemons because the changes are effectively immediately.

Best regards,
Fabio

[Raj D.]

Hi Aji ,

Its /var/adm/inetd.sec

You can put like this :

login allow 10.* 192.54.24.5

Check #man inetd.sec for further.

Cheers,
Raj.

[Raj D.]

Aji ,

You can put

telnet deny and ftp deny with IP address.

in /var/adm/inetd.sec

telnet deny IP
ftp deny IP

Cheers,
Raj.

[Alessandro Pilati]

As correctly said by the other forumers you can managet inetd.sec file, or you could use also IP-Filter ( less simple ):

http://www.obfuscation.org/ipf/ipf-howto.txt

Regards,
Alex

[Aji Thomas]

Hi guys,

thanks fot the update,
It worked dynamically.

thanks,
AJi