Article View: comp.security.misc
Article #337Re: Summary: Re: Disabling telnetd and ftpd etc
From: Rob J. Nauta
Date: Wed, 02 Sep 1992 20:51
Date: Wed, 02 Sep 1992 20:51
27 lines
1427 bytes
1427 bytes
daniel@vcp1.vcp.monash.edu.au writes: >So the upshot is: - >* Don't run PC-NFS >* Don't run YP or NFS >* disable telnetd, ftpd, tftpd and r*d daemons and any others not needed >* get the router set up to disallow any packets for the Iris from outside > the subnet to reach it. >and the system will be as secure as the lock on the door of its room. Yes, but also not as useable. For instance, if you block all traffic to your network, why bother connecting ? Just cancel your Internet subscription. If you deny everything, you won't receive any mail nor news, is that what you want ? Furthermore, it's ok to run NIS and NFS (although with one machine it's not needed), if you set up your router to block access to ports 111 and 2049/UDP (last one for NFS). Rob -- /-----------------------------------------------\ Never ,==. | Rob J. Nauta, UNIX computer security expert. | Apologize, /@ | | rob@wzv.win.tue.nl, Phone: +31-40-837549 | Never /_ < | Feel free to email me for free advice | Explain. =" `g'
Technical Details
Message-ID:
<3842@wzv.win.tue.nl>Path:
arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin09!wzv!robReferences:
<1992Sep2.150939.1@vcp1.vcp.monash.edu.au>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin09!wzv!rob From: rob@wzv.win.tue.nl (Rob J. Nauta) Newsgroups: comp.security.misc Subject: Re: Summary: Re: Disabling telnetd and ftpd etc Message-ID: <3842@wzv.win.tue.nl> Date: 2 Sep 92 20:51:00 GMT References: <1992Sep2.150939.1@vcp1.vcp.monash.edu.au> Organization: Sex, UNIX & Rock 'n Roll Lines: 27