I need to be able to telnet or ssh into my HP-UX box remotely

[Alfred Asebiomo]

Hello guys,
I need to be able to telnet, ftp and ssh into my HP-UX box ( 10.2 ) remotely.
I have access to putty.
What files do I need to configure.
I have a static IP from my ISP.
Also, my HP is not connected to a router.
Thank you

Alfred

[Karthik S S]

What do you mean by remotely?? Do you want to access your HP-UX server from outside the intranet?? Or you want to access it from with in a LAN??

ftp and telnet are enabled by default on hp-ux 10.20. You can get SSH from,

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

-Karthik S S

[Karthik S S]

I am sorry, that link doesn't contain the binary for 10.20.

Try,

http://www.openssh.com/portable.html

-Karthik S S

[Alfred Asebiomo]

I mean I want to be able to acess it out site the intranet. For instance when I am out of town
do I just make my lan0 IP same as my static IP?

[Naveej.K.A]

Yes you can telnet from outside if you have not blocked the telnetd to bind on this IP address.

with best wishes
naveej

[Alfred Asebiomo]

Sorry I meant outside the intranet

[Alfred Asebiomo]

How do I check if it's blocked or not

Alfred

[Naveej.K.A]

to check whether it is blocked from the OS level, you can go to the console and then telnet to the IP assigned bye the ISP, if you are getting a login, u haven't got any firewall sort of thing installed on the Unix box.
Could be some firewall is installed on the network and there you have to internet and then telnet the IP and see.

With best wishes
naveej

[Fabio Ettore]

Hi Alfred,

just launch a PuTTY session: insert IP address of your HP-UX 10.20 system and be sure that port is 23 with protocol telnet.
If there are not restrictions then you would be able to telnet into system.

Otherwise check /var/adm/inetd.sec for restrictions on telnet or ftp services.
Also check if the file /etc/securetty exists.

Best regards,
Ettore

[Printaporn_1]

Hi Alfred,

you need to have VPN , or some kind of that setting from your ISP.

[Mobeen_1]

Alfred,
As some one on this forum rightly pointed out, to have access to your Unix server from outside intranet (from internet/home), you would need to have the following setup

1. VPN setup and
2. Some form of authentication for ensuring
that only people allowed can come in.

For Item#2 most people i know use some form of Secure ID cards, that generate a password randomely.

regards
Mobeen

[Alfred Asebiomo]

I used to have my HP connected to a router; and the IP address used to be 192.168.1.2.
Now I have disconnected the router, so when I change my lan0 IP address to the static IP given by my ISP, and rebooted, I could not log back onto the internet.
I can't even ping the IP address

Alfred

[Seth Parker · Accepted solution]

Several things to consider:

1. Telnet and FTP both use clear-text passwords, so their use across any sort of public network (like the Internet) is *very* discouraged.

2. A VPN would be nice, but if you can't set one up, at least using SSH would help since your session would be encrypted.

3. Using SSH, you can also get SFTP and SCP, which work like FTP and RCP, so you wouldn't need telnet or FTP to be exposed to the Internet.

4. Anytime you expose a host to the Internet, you're running a risk of it being hacked or DoS'd. Connecting the host to the Internet is the easy part. Protecting it is *much* harder.

As for your connectivity problems, if you can't set up a VPN, you need to hook the router back up and give the host back its old IP address, but *only* if you can set up NAT on the router. You'd set up the public side of the NAT to the IP address your ISP gave you, and the inside address to 192.168.1.2. That way, internal hosts can still connect to the HP-UX box, and you can get to it from the Internet.

Obviously, the actual process is much more involved, but I hope this gets you going.

Good luck and be careful witht that box!
Seth

[rmueller58]

if you do use SSH you can restrict host access based on IP or subnet. I would NOT use telnet or FTP from outside to inside your begging for disaster..

Make sure your firewall is also blocking ICMP inbound.. You will NOT be able to ping anything.

For SSH it is fairly download OpenSSH or F-Secure Shell, OpenSSH is "free" to
non-commercial entities, compile it and start the daemon, generally it will create your rc script and place them in the correct directory.

Which SSH to file transfer you either use SFTP or SCP. You can tunnel X thru SSH as well but performance sucks.

If this is a small business at home I would recommend at minimum a small site router such as a Linksys or Dlink with a firewall feature set, and NAT into the device in question.

If this "device" contains critical information, webpages, etc, etc, the less you have exposed to NMAP, XPROBE, SATAN, NESSUS the safer you'll be. If it is seen it will get attacked.
I set up our intrusion detection system for our agency and not a day goes by without a probe or outright attempt to trespass.

Map no port globally, port 80 and 443 should be the ONLY thing seen to the outside world.