Re: SCO 5.0.7 AS FIREWALL

From: Ian Wilson (scobloke2_at_infotop.co.uk)
Date: 05/23/05 

Date: Mon, 23 May 2005 16:21:11 +0000 (UTC)

Mainak Yajnik wrote:
> Dear Group:
>
> In my last thread I was unable to configure the box acting as router.
> Well with the groups help I was able to do the needful.
>
> A special Thanx to Mr. Tony (aplawrance.com) & JP for helping me achive
> my target.
>
> Apprently I found my server is accessible from Internet and is security
> hazard for my organisation.

> I want to block Telnet on the server. I have already configured SSH and
> is working fine.

I'd edit /etc/inetd.conf and comment out telnet (plus a lot more).

> I also want to have the server to give me secure ftp login.

I'd consider sftp instead.

> My current Security setting of SCO box is set to Traditional.

I always install OSR5 with security set to "Improved". You can alter the
security level from Traditional to Improved using `/etc/relax improved`.
Even so I guess an OSR5 system would need a lot of additional careful
configuration before being considered secure for direct Internet
conection without an external firewall.