From owner-freebsd-isp Sun May 27 5:38: 7 2001 Delivered-To: freebsd-isp@freebsd.org Received: from bilver.wjv.com (dhcp-1-248.n01.orldfl01.us.ra.verio.net [157.238.210.248]) by hub.freebsd.org (Postfix) with ESMTP id 59DB737B424 for ; Sun, 27 May 2001 05:38:02 -0700 (PDT) (envelope-from bill@bilver.wjv.com) Received: (from bill@localhost) by bilver.wjv.com (8.11.1/8.11.1) id f4RCbts89743; Sun, 27 May 2001 08:37:55 -0400 (EDT) (envelope-from bill) Date: Sun, 27 May 2001 08:37:54 -0400 From: Bill Vermillion To: Jorge Biquez Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Advice on ISP services Please. Message-ID: <20010527083754.C89414@wjv.com> Reply-To: bv@wjv.com References: <3B104586.A643F9A9@buckhorn.net> <005201c0e64d$0c068cc0$0bdea8c0@island.net.au> <000d01c0e65b$c78d1be0$83a3ded1@hei.net> <5.0.2.1.2.20010526221708.02912720@icsmx.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <5.0.2.1.2.20010526221708.02912720@icsmx.com>; from jbiquez@icsmx.com on Sat, May 26, 2001 at 10:45:40PM -0500 Organization: W.J.Vermillion / Orlando - Winter Park Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, May 26, 2001 at 10:45:40PM -0500, Jorge Biquez thus sprach: Others have answered you other questions. > - How to avoid users have access to telnet services. I've turned telnet off entirely on several machines I maintain. Only access is via 'ssh'. Do that in addition to using a non-existant shell. I like to use /usr/bin/false [habit from a long time ago]. /sbin/nologin is used but that gives you an 'account is currently not available message'. If you do run telnet you might think of putting -h after telentd in the inetd.conf file. This way you only find out what OS is running AFTER you complete the login. Giving as few hints as possible as to the OS and version is good practice IMO. Either of the above 'false' or 'nologin' do display the OS and version. Bill -- Bill Vermillion - bv @ wjv . com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message