<html> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 10 (filtered)"> <style>  </style> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'>The only one of these I would allow is ssh.</span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'>Make sure that you have the most recent ssh packages installed, if in doubt check <a href="http://www.openssh.com/security.html">http://www.openssh.com/security.html</a> to see whats wrong with the installed one.</span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'>You can apply ip security to the ssh daemon either via sshd_config (refer to the man pages) or by configuring a tcp wrapper.</span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'> </span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'>external + telnet + rlogin = asking for headache (if you absolutely must have them at least use a tcp wrapper to limit access)</span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'> </span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'>-T</span></font></p> <p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size: 10.0pt;font-family:Arial;color:navy'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br> <b><span style='font-weight:bold'>From:</span></b> redhat-list-bounces@redhat.com [mailto:redhat-list-bounces@redhat.com] <b><span style='font-weight:bold'>On Behalf Of </span></b>David Saldana<br> <b><span style='font-weight:bold'>Sent:</span></b> Friday, April 09, 2004 9:15 AM<br> <b><span style='font-weight:bold'>To:</span></b> redhat-list@redhat.com<br> <b><span style='font-weight:bold'>Subject:</span></b> FTP Server</span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Hi All,</span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> I have an external FTP server. the server now is just accepting FTP connection which is fine but I would like that some people form our company have telnet, ssh or rlogin connection, how can I open this type of connection without affecting security?.</span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><br> Thanks</span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font></p> <p class=MsoNormal style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>David</span></font></p> </div> </body> </html>