Pieter Claassen wrote:
> 
> Just two questions please:
> 1. How do I civilly disable telnet login to a machine. We are running ssh
> and I don't want the telnet deamon to start.

/etc/inetd.conf
Comment lines:
ftp     stream  tcp     nowait  root    /usr/sbin/tcpd  in.ftpd -l -a
telnet  stream  tcp     nowait  root    /usr/sbin/tcpd  in.telnetd


> 
> 2. We are fedup with ipfwadm. As soon as we enable ipfwadm -I -p -deny and
> only allow the specified ports to be open, then we get no traffic.
> 
> What is ironic is that http will get forwarded (masqueraded) to the subnet,
> but the gateway machine cannot see any protocol|any port. I know that
> ipfwadm pulls masqueraded packets away before the forwarding filter. What
> about the input filter.
> 
> Is there any way that I can test what services are running on what ports
> (ie. if some of the services on the machine was started with non
> /etc/services port no.'s)
> 
> Question, is this possibly an ipfwadm problem and will it disappear if we go
> to ipchains?
> 
> Is anybody running anything else that is ok?
> 
> Thanks,
> Pieter
> 
> __.__._--_-_--_.__.._.__--_-_---_--
> Pieter Claassen
> www.kryptoplus.co.za
> Tel: (021) 448-4326/7  Fax: (021) 448-4185
> .._-__-_--_-__-_-->__.>.>.__._-_-_
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-net" in
> the body of a message to [EMAIL PROTECTED]
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to