Re: Disble remote login

From: Kevin D. Kinsey, DaleCo, S.P. (kdk_at_daleco.biz)
Date: 10/16/04

  • Next message: Dan Langille: "The FreeBSD Diary: 2004-09-26 - 2004-10-16" 
    Date: Sat, 16 Oct 2004 14:33:49 -0500
To: Spiral Eyed Girl <spiraleyedgirl@hotmail.com>

    Spiral Eyed Girl wrote:

    > Hello, I am a FreeBSD newbie, so please excuse me if I don't use
    > correct jargon :)
    >
    > I am running FreeBSD 5.2.1, and durring setup, I diabled all servers
    > (ftp, finger, etc). My
    > question is, how to I disable remote login through telnet? I am using
    > this as a workstation,
    > and have no use for a server. I have an always on connection, so I
    > want to be secure
    >
    > Any help?
    >
    > Thanks

    Turning off all unwarranted services is the first line of defense.
    Another good point would be to run a firewall, either ipfw or ipf.

    A section in the Handbook describes installation and configuration
    of ipfw.

    You'd want one rule, for sure, for the situation described above. Something
    akin to:

            deny ip from any to me setup

        which should deny any machine from attempting a connection to a server
    port on your machine, should any be open. Put it high in the list.

    Kevin Kinsey
    _______________________________________________
    freebsd-newbies@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
    To unsubscribe, send any mail to "freebsd-newbies-unsubscribe@freebsd.org"

  • Next message: Dan Langille: "The FreeBSD Diary: 2004-09-26 - 2004-10-16"

    Relevant Pages

    • Re: New IPFW Setup.
      ... > Here is the ruleset I currently use on all the servers. ... Please don't mail freebsd-ipfw with questions about ipfw usage. ... This way any service loaded in a non-privileged port ... for FTP to work. ...
      (freebsd-questions)
    • Name lookup strageness
      ... The box runs ipfw and natd. ... firewall rules that prohibit connections to these services unless the ... I do name lookups to my ISP's name servers (my firewall rules only ... my internal network are still able to do name lookups to my ISP's name ...
      (FreeBSD-Security)
    • Re: can we disable AAAA queries in the resolver ?
      ... > A significant number of these are ad servers, ... I short-circuited to hosts and ipfw. ... telnet: connect to address 127.0.0.2: Permission denied ... Unable to connect to remote host ...
      (freebsd-hackers)
    • Re: IPFW almost works now.
      ... Use stateful rules -- they keep track of that and open the ports ... man ipfw ... Look for "keep-state" ... My servers run fine for active and I DON'T allow access ...
      (FreeBSD-Security)
    • Re: pf buggy on 6.1-STABLE?
      ... After upgrading a handful of web servers from FreeBSD 4.11 with ipfw ... A test page that makes 10,000 rapid SQL connections which connected 100% ... I recompiled the kernel with pf disabled and ipfw enabled, ...
      (freebsd-stable)