> 2 Questions:
>
> 1 - Any user can use
> > open xxx.xxx.xxx.xxx 25
> .. and telnet to the sendmail port on the Sun boxes. The security
> here is performed at the Router and Firewall system, trying to leave the
> inner system alone. (Yah, I know that a single break and the whole system
> is compromised but this is how it's being done...)
> -- Therefore, I'd like to find a way to kill that ability, and/or
> replace telnet with something more limited.
Write a program that has them type in the IP address and then execs telnet
so you're sure they're connecting to the correct port on the destination
machine.
Walker Aumann
walkera @
gg .
caltech .
edu
References:
|
|