🚀 go-pugleaf

In article <1992Aug27.174729.1@vcp1.vcp.monash.edu.au> daniel@vcp1.vcp.monash.edu.au writes:
> I thought that the best way to make the Iris secure and still allow network
> access would be to disable telnetd and ftpd, leaving inetd and smtpd working
> for mail to be available.  This would allow telnet and ftp *from* our Iris,
> but not *to*.

  Just nuke inetd -- this kills off most of your networking services.
(Outgoing) ftp and mail still work fine.

> Can anyone comment on the security of this measure.  Is there any likelihood
> at all of an intruder when there is no telnetd or ftpd operating?

  Yes.  Any service that you run can be used to get in.  Typically,
though, you only really have to watch for things like windowing systems,
yellow-pages or rpc-like services, NFS, home grown daemons or anything
that gets started (and stays running, obviously) in your rc files (or
whatever the iris uses, can't remember if it's sysV or not WRT that)
etc.

 -- d