Skip site navigation (1)Skip section navigation (2)
Date:      Mon,  6 May 2002 23:25:34 -0700 (PDT)
From:      "Nielsen" <nielsen@memberwebs.com>
To:        <dowen@pstis.com>, <security@FreeBSD.ORG>
Subject:   Re: Telnet Exploit
Message-ID:  <20020507062534.E638C37B401@hub.freebsd.org>
References:  <135YGUD5H2YCVJ3JLY3L2CMBQCXYNOQCEADYX2T5@ziplip.com> <200205061347.54915.dowen@pstis.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At our site we've implemented a policy of separating "secure" and "insecure"
logins. We do this via a PAM module. We use SSH for shell logins
exclusively. Using this PAM module we mandate that the same password/login
can't be used with insecure (SMTP, FTP etc..) protocols.

> So if we are going to do away with telnetd, we should scrap FTP and SMTP
> then.. as they are garbage protocols.

Nate



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020507062534.E638C37B401>