Telnet on a test box

[Matt Mumford]

Hey all,

I just set up a N4000 to act as our new test box for our production N4000. They are identical except the IP. I have used SAM to limit all incoming activity to our developtment box. I also made entries in the HOST file to point all known servers back into the test box. I am trying to figure out how to stop all outgoing traffic from the testbox like telnet, etc...

Matt

[RAC_1 · Accepted solution]

rename/move the telnet executable.

[Matt Mumford]

simple enough. I am also having the network guys put this test server in a DMZ.

Matt

[Jeff Schussele]

Hi Matt,

Or you can set the perms on the telnet binary such that root can only run it.

Rgds,
Jeff

[RAC_1]

You can also install ipfilter product. This is free product.
products.hp.com

[Matt Mumford]

thanks guys...all great answers....

Matt

[Matt Mumford]

Hey all,

This IPFILTER product is awesome it will allow me to do everything I want to do.

Having said that, is there a GUI type version of this product or similar HPUX product?

Matt

[Darrel Louis]

Matt,

There is no GUI for IPFilter.
There is another product you might like aswell, Bastille, which will help you lockdown your server(Security) this comes with a GUI interface.


Regards

Darrel
ipfstat -v-L

[Steven E. Protter]

IPFilter is available on the application cd's. You get those when you have a software contract.

Or:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

For a DMZ box, consider Bastille security hardening:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

A requirement for Bastille:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=PERL

SEP

[Matt Mumford]

Thanks all...great feedback...

Matt