telnet security restrictions

[Marcin Mirkowski_1]

Hello,

How can I set restrictions to log in to the server for one user to limit IP address from which the connection is made?
It's no problem to set that restrictions in inetd.sec, but this is limitation for all users and I want to set this onlu for one.

BR,
Miron

[KapilRaj]

Miron,

a simple script in /etc/profile to reject him / IP ??

Kaps

[Marcin Mirkowski_1]

Hello,

I was thinking about this resolution, but I'm looking for some more professional way.

Miron

[Mark Grant · Accepted solution]

Marcin, we've been here before and there insn't another solution that the .profile approach.

grep `who am i -a | awk '{print $8}'` > /dev/null ¦¦ exit 1

Isn't too ugly for a .pro

[KapilRaj]

I have SSH installed in AIX and have disabled telnet totally !

and thru ssh you can have the following option in /etc/ssh/sshd_config

AllowGroups sshusers

Add all other users except this id to "sshusers" group and you are done !!!

I am sorry have'nt tested this in HPUX :(

Also you need some tool like putty (freeware ) to access this node thru port 22 and no access will be on 23 (telnet) !!!


Regds,

Kaps