tripping over Telnet

Robinson, Doctor doctor.robinson at citigroup.com
Fri Feb 27 20:05:57 UTC 2004


Check /etc/services for Telnet support, then start inetd.

-----Original Message-----
From: redhat-install-list-admin at redhat.com
[mailto:redhat-install-list-admin at redhat.com]On Behalf Of Rick Stevens
Sent: Friday, February 27, 2004 3:01 PM
To: redhat-install-list at redhat.com
Subject: Re: tripping over Telnet


John Reynolds wrote:
>>On Fri, Feb 27, 2004 at 09:13:13AM -0800, Info wrote:
>>
>>>I just put RedHat 8 on a machine.  I've been trying to telnet to it.
>>>But it refuses connections.
>>
>>Good for it.
>>
>>
>>>I've tried disabling the firewall.
>>>(Everytime I run the gui, it starts out with the firewall at high
>>>security.
>>
>>No, it doesn't.
>>
>>http://www.rhil.net/docs/faq.html#firewall>
>>
>>>Since box refuses to talk, I suspect that it is the case.)
>>>
>>>Anyone got a clue as to where the real enable Telnet switch is
hiding? 
>>
>>First, telnet is not just A Bad Idea, it's A Very Bad Idea.  It is a
>>security hole you can drive a truck through.  Use Secure SHell (SSH)
>>instead.  See
>>
>>http://www.rhil.net/docs/security.html
>>
>>for a complete discussion.
> 
> 
> Nice work if you can get it, but some of us are locked in to
supporting 
> telnet-using systems, and we don't have the option of switching all
1000+ 
> systems to ssh.

Do whatever you wish.  They're your systems and it's your system and
network security that's at risk.  One of the FIRST things for a secure
lockdown is to disable any and all telnet access--from inside your
network as well as outside and firewall the hell out it.

To paraphrase the commercial, "Got hacked?"
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      I won't rise to the occasion, but I'll slide over to it.      -
----------------------------------------------------------------------


_______________________________________________
Redhat-install-list mailing list
Redhat-install-list at redhat.com
https://www.redhat.com/mailman/listinfo/redhat-install-list
To Unsubscribe Go To ABOVE URL or send a message to:
redhat-install-list-request at redhat.com
Subject: unsubscribe





More information about the Redhat-install-list mailing list