From owner-freebsd-questions  Wed Apr 22 17:18:40 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id RAA11774
          for freebsd-questions-outgoing; Wed, 22 Apr 1998 17:18:40 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from gdi.uoregon.edu (gdi.uoregon.edu [128.223.170.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA11754
          for <freebsd-questions@FreeBSD.ORG>; Thu, 23 Apr 1998 00:18:27 GMT
          (envelope-from dwhite@gdi.uoregon.edu)
Received: from localhost (dwhite@localhost)
          by gdi.uoregon.edu (8.8.7/8.8.8) with SMTP id RAA29566;
          Wed, 22 Apr 1998 17:18:17 -0700 (PDT)
          (envelope-from dwhite@gdi.uoregon.edu)
Date: Wed, 22 Apr 1998 17:18:17 -0700 (PDT)
From: Doug White <dwhite@gdi.uoregon.edu>
Reply-To: Doug White <dwhite@resnet.uoregon.edu>
To: Foubert Patrick <foubertp@d-f.be>
cc: Freebsd <freebsd-questions@FreeBSD.ORG>
Subject: Re: Gateway and Firewall with  Freebsd
In-Reply-To: <01bd6dcc$2a70bf70$64636261@fopa.be>
Message-ID: <Pine.BSF.3.96.980422171728.8428d-100000@gdi.uoregon.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Wed, 22 Apr 1998, Foubert Patrick wrote:

> My problem is controlling firewall by a telnet cession or by a specific
> port different of port 23 for an telnet cession. 
> 
> In effect: i can't log as root in a telnet cession.  If i log in a
> telnet cession with a user with same group of root (wheel group) i have
> not rights for set a firewall parameter by ipfw command.  So if i want
> make a remote reboot of firewall: is not possible by a telnet cession. 
> 
> Please email me how make for log a telnet cession with root user (or
> with a user with same rights that can set ipfw and reboot). 

This isn't permitted normally for security reasons, however you can
override this by editing /etc/ttys and changing the `insecure' to `secure'
for the network terminals ttyp*.

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message