From owner-freebsd-questions Wed Oct 31 14: 7: 9 2001 Delivered-To: freebsd-questions@freebsd.org Received: from albatross.prod.itd.earthlink.net (albatross.mail.pas.earthlink.net [207.217.120.120]) by hub.freebsd.org (Postfix) with ESMTP id 911A937B407 for ; Wed, 31 Oct 2001 14:07:05 -0800 (PST) Received: from user-2ivfo13.dialup.mindspring.com ([165.247.224.35] helo=gohan.cjclark.org) by albatross.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 15z3Vo-0002ln-00; Wed, 31 Oct 2001 14:07:05 -0800 Received: (from cjc@localhost) by gohan.cjclark.org (8.11.6/8.11.1) id f9VLhg800511; Wed, 31 Oct 2001 13:43:42 -0800 (PST) (envelope-from cjc) Date: Wed, 31 Oct 2001 13:43:42 -0800 From: "Crist J. Clark" To: alexus Cc: freebsd-questions@freebsd.org Subject: Re: telnet Message-ID: <20011031134342.C246@gohan.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <000501c161d6$21529380$0f00a8c0@alexus> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <000501c161d6$21529380$0f00a8c0@alexus>; from ml@db.nexgen.com on Wed, Oct 31, 2001 at 01:34:44AM -0500 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Oct 31, 2001 at 01:34:44AM -0500, alexus wrote: > can i allow only certain users to use telnet Change the permissions on /usr/bin/telnet to 550, put all users who you want to allow to use it into one group, and change the ownership of /usr/bin/telnet to that group. > and all other will have to use ssh only? But that does not stop someone from copying a telnet executable to their home directory and using that. If you set up a firewall on the machine, # ipfw pass tcp from any to any 23 out gid # ipfw deny tcp from any to any 23 out So that only the "telnet-group" can try to reach the usual telnet port on remote machines. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message