Great Circle Associates Firewalls
(April 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Minimalist 'telnet' wanted (was: Mixing Authentification Strategies)
From: plarkin @ iphase . com (Patrick Larkin Jr)
Date: Fri, 8 Apr 94 14:15:05 CDT
To: firewalls @ greatcircle . com

In article <9404010220 .
 AA17569 @
 otter .
 tis .
 com>, uunet!tis.com!mjr (Marcus J Ranum) writes:
>  You might want to consider
> doing something like our login-shell hack, where the person's login
> shell is a challenge/response application that exits if they can't
> authenticate, and that pastes up their environment and executes the
> real login shell if they do. [yes -- this approach has advantages
> and disadvantages]

I wish to do something similar, but It would require a special telnet client.
We want remote users to connect to a special host which runs an 'athentication shell'
and if he/she is able to authenticate, then the system would ask them
for the name of the internal host they want to connect to (nobody should
have an interactive account on the 'gate' host).  I am looking for a telnet
client replacement that would allow US to set the modes and communication
parameters and not accept the ^] escape. This way users could only connect
to hosts/ports that we have defined as 'OK' and also allow us to force a 
'raw' mode so such thinks as BREAK, Control codes and Escapes get passed
safely thru to the target for such things as PC (ugh) file transfers.

Any ideas on such a thing?  (Please mail me direct and I'll post if
there's enuff interest.)   Thanks,
-- 
////////////////////////////////////\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
|\|  <plarkin @
 iphase .
 com> PATRICK LARKIN - System Administrator    |\|
|/|  #include <std_disclaimer.h>   /*  Interphase Corporation  */  |/|
|\|  #include "clever_quote_de_jour.h"   /*  Dallas TX - USA  */   |\|

Indexed By Date Previous: Re[2]: What??
From: "Ronald A Martin" <0066169 @ CCMAIL . EMIS . hac . com>
Next: Re: system() -> Mosaic
From: dotytr @ nscultrix2 . network . com (Ted Doty)
Indexed By Thread Previous: Re: Welcome to firewalls
From: Brent Chapman <brent @ mycroft . GreatCircle . COM>
Next: unplugging...
From: hobbit @ ftp . com (*Hobbit*)

Google
 
Search Internet Search www.greatcircle.com