Re: rlogin

[Alexey Fadyushin <fab s-tunnel com>]

You don't need to restart the server after disabling the service.
If you want to test that the rlogin service is disabled you can use the
command
'netstat -t -a' and check that no program is listening at the 'login'
tcp port
(see the column 'Local address' in the netstat output).

Alexey Fadyushin
Brainbench MVP for Linux.
http://www.brainbench.com

> Info пишет:
> 
> I encountered a problem with rlogin.
> 
> Logwatch indicate there was a secured login from this ip
> 
> ---------------- Connections (secure-log) Begin -------------------
> 
> Connections:
>    Service login:
>       217.97.59.98: 1 Time(s)
> 
> And /var/log/messages shows me that this break in via rlogin
> 
> Dec 27 04:55:52 ahead xinetd[13139]: Bad line received from identity server at 217.97.59.98: 3243 , 513 : ERROR : UNKNOWN-ERROR
> Dec 27 04:55:52 ahead rlogind[13139]: Connection from 217.97.59.98 on illegal port
> I had disabled rlogin now, do i have to restart the box and how do i test if rlogin is disabled?
> 
> regards
>