From owner-freebsd-questions Tue Mar 2 12: 9: 4 1999 Delivered-To: freebsd-questions@freebsd.org Received: from jedi.burnit.net (jedi.burnit.net [151.198.231.7]) by hub.freebsd.org (Postfix) with ESMTP id 56EB214DF5 for ; Tue, 2 Mar 1999 12:08:57 -0800 (PST) (envelope-from wharton@burnit.net) Received: from localhost (wharton@localhost) by jedi.burnit.net (8.9.2/8.9.3) with ESMTP id PAA17592; Tue, 2 Mar 1999 15:13:03 -0500 (EST) Date: Tue, 2 Mar 1999 15:13:02 -0500 (EST) From: "Daniel J. Wharton" To: Phil Cc: Shawn Ramsey , freebsd-questions@FreeBSD.ORG Subject: Re: Disabling Telnet (DING DING DING) In-Reply-To: <36DC01D0.33E53499@Syne-Post.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG No... look at the bottom of the message you have to add /sbin/nologin to the file /etc/shells If you read that file it tells you that those shells allow FTP. What I did was I copied /sbin/nologin to /sbin/noshell. Then I added /sbin/noshell to /etc/shells. That way there if I want to disable the account completely, then I just make their shell /sbin/nologin, but if I want to allow FTP but no shell, I make their shell /sbin/noshell. Cool??? Sorry about the mix up DAN WHARTON ----------------------------------------- System Administrator THE BURNIT NETWORK - www.burnit.net Director of Network Operations BIG SECRET - www.bigsecret.org ----------------------------------------- On Tue, 2 Mar 1999, Phil wrote: > Is this method also a secret???? > I hope not I would really like to see what the solution is. > > thanks > > Phil > > "Daniel J. Wharton" wrote: > > > DING DING DING we have a winner. > > > > Shawn Ramsey had the correct answer. This is how you disable telnet but > > allow FTP... THANK YOU!!! > > > > DAN WHARTON > > > > ----------------------------------------- > > System Administrator > > THE BURNIT NETWORK - www.burnit.net > > > > Director of Network Operations > > BIG SECRET - www.bigsecret.org > > ----------------------------------------- > > > > On Mon, 1 Mar 1999, Shawn Ramsey wrote: > > > > > > I was wondering if anyone could tell me how I can prevent users from > > > > telneting in without disabling FTP access as well. I want people to be > > > > able to FTP in and update their websites, but not be able to TELNET in. > > > > > > > > I already tried setting their shell to /sbin/nologin, but that disables > > > > FTP access as well. Thank you very much in advance for any advice. > > > > > > Add : > > > > > > /sbin/nologin > > > > > > > > > to the file /etc/shells > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message