HP-UX security settings

[Murat SULUHAN]

Hi

I am using HP-ux 11.0 and 11i.

How can I restrict telnet/ssh/XWindow login prompts and r* commands for some ip adress

Best Regards
Murat

[Artyom Voronchihin · Accepted solution]

Hello!
man inetd.sec(4).
For example put follownig string to /var/adm/inetd.sec to allow telnet from appointed IP adresses.
telnet allow 192.168.0.1 192.168.0.10 .... and so on.
Also you can make changes in this file using SAM (goto Network and Communications - System Access - Internet Services).

[Alex Glennie]

c) Xwindows access is usually done via /usr/dt/config/Xaccess file .... documentation/syntax is within the file.

[Maz_2]

As you can see there are numerous ways of restricting access, for example:
- inetd.sec
All of the internet services controlled by inetd (including telnet
and rlogin) have their access controlled by the security file
/var/adm/inetd.sec. To restrict or allow particular access, specifically list the service to be restricted, denied, or allowed. Then list specific IP addresses for individual hosts or use network addresses to deny or allow entire networks. Check the man pages on inetd.sec for more information on the
format of the file. The following is an example that will allow everything on
the 15.56 subnet and the single host 192.13.12.1 to telnet in.
Telnet sessions from all other hosts will be denied: telnet allow 15.56.* 192.13.12.1


Hope this helps!