Re: telnet on a specific ip address



On Wed, 27 Jun 2007, Martin Gregorie wrote:

MG> Alan Clifford wrote:
MG> > On Tue, 26 Jun 2007, Martin Gregorie wrote:
MG> >
MG> > MG> > MG> Does telnetd take any notice of /etc/hosts.allow or
MG> > /etc/hosts.deny? If not,
MG> > MG> you can always use tcpd , which DOES use them, as a wrapper for
MG> > telnetd.
MG> > MG>
MG> > Thankyou for that pointer. I'd be using tcpd as:
MG> >
MG> > # https stream tcp nowait root /usr/sbin/tcpd in.telnetd
MG> >
MG> > in inetd.conf
MG> >
MG> > I've had a look at man hosts_access - its not very readable but I can see
MG> > that there is mention of ip numbers. It looks hopeful.
MG> >
MG> I scanned the man page rapidly before I posted that hint. It looked to me as
MG> if tcpd does a reverse DNS lookup for the remote host that opened the
MG> connection and rejects the connection if the host name retrieved from the
MG> socket doesn't match that returned by DNS. If that check is passed it
MG> applies the rules in hosts.allow and hosts.deny. So, if I read it right it
MG> should be safe to write the access rules using IP numbers or host names.
MG>

That's the wrong machine isn't it?. What I want is for the server machine
to have four ip numbers such that on 81.187.211.42, port 443 is a website,
on 81.187.211.44 port 443 is another website (well actually the same
website but with a different certificate). This is already installed.
Then on the third ip on port 443 would be the sshd server and on the
fourth ip on 443 would be telnetd server.


--
Alan

( If replying by mail, please note that all "sardines" are canned.
However, unless this a very old message, a "tuna" will swim right
through. )

.



Relevant Pages

  • Re: telnet on a specific ip address
    ... MG> Alan Clifford wrote: ... MG>> On Tue, 26 Jun 2007, Martin Gregorie wrote: ... I'd be using tcpd as: ... MG> connection and rejects the connection if the host name retrieved from the ...
    (uk.comp.os.linux)
  • Re: telnet on a specific ip address
    ... It looked to me as if tcpd does a reverse DNS lookup for the remote host that opened the connection and rejects the connection if the host name retrieved from the socket doesn't match that returned by DNS. ... if I read it right it should be safe to write the access rules using IP numbers or host names. ... martin@ | Martin Gregorie ...
    (uk.comp.os.linux)
  • Re: Swing performance query
    ... Martin Gregorie wrote: ... fetch a block of data from the server ... This shows that, provided the average fetch is more than 25 bytes or so, the transfer rate across a 10Mb/s sockets connection is at least as fast as the data rate on a 9600 baud serial connection. ... What about the display operation that I thought was slow? ...
    (comp.lang.java.programmer)
  • Re: Cant send email from J2ME.
    ... I should follow to login email server. ... Its difficult to recommend anything when you don't say what OS you're using or what's already on your local LAN, ... your LAN then there will be an SMTP MTA running on it ... martin@ | Martin Gregorie ...
    (comp.lang.java.programmer)
  • Re: Advice in mini-ITX
    ... I usually use it in headless mode from this ... even older Thinkpad. ... martin@ | Martin Gregorie ...
    (uk.comp.os.linux)