Re: More on Telnet

> Ok, I dug out some more on the Telnet business (referring to my previous
> email) and I found out the following.
>
> 1) My /etc/xinetd.d/telnet has disable=no
> 2) I restarted xinetd by "/etc/init.d/xinetd restart"
> 3) I did a "netstat -a | grep telnet" and the telnet daemon is listening
> 4) I can telnet to the localhost but not from a remote machine
>
> So it must be some firewall issue on the machine. In fact when I was
> installing I chose medium security.
>
> Can anybody help me?

No! :)
Make sure that port 23 is open for connects from nonlocal machines on the
same subnet, but not from nonlocal machines not on the same subnet. You
can determine this with
     ipchains -L -n

You can edit the output
    ipchains-save > ipchains-rules
    vi ipchains-rules

...and then restore it back to ipchians
     #!/bin/bash
     /sbin/ipchains -F
     /sbin/ipchains -X
     /sbin/ipchains-restore < ipchains-rules
     ipchians -L -n
     echo done.

There might be other ways to do it, but I dunno about any that are any
easier without getting to know the firewall syntax of ipchains. If you
look hard enough, you might actually find a gui thingy to help out.

If you want to implement best practices though, I think you would be well
served to learn and use iptables for the connection tracking capability.
In this case, you would be even better served to do
     rpm -e telnetd
and learn about sshd.

HTH
-- 
Keith Mastin
BeechTree Information Technology Services Inc.
Toronto, Canada
(416)696 6070