[plug] telnet on Mandrake

[Kenworthy Family]

Security feature or bug? - to me if it stops you doing something that up to now
has been normal practice, and have not clearly, and easily findably documented
the fact, then its a bug!!!  I have no evidence other than telnet into the box
not working that any extra security has been implemented.  As well, telnet does
connect, brings up the escape key message, then disconnects - where's the
security there unless disabling a very useful feature of a networking operating
system is security - may as well pull the network cable.  The above winge
becomes irrelevant if it is Mandrakes normal precise to disable telnet access -
but their FAQ website etc makes no real fuss over it being any more secure than
other distro's - or appears to mention telnet in particular.

BillK


Craig Foster wrote:

> *This message was transferred with a trial version of CommuniGate(tm) Pro*
> I agree with the security features coming out in newer versions of Linux.
> However, I think it was LinuxWorld which disagreed with Red Hat's decision
> to copy Mandrake and OpenLinux in adding a non-root user upon first-time
> installation for RH6.1.
>
> I was kind of shocked to hear them preaching to newcomers that this is
> unnecessary.
>
> I've e-mailed the author with my thoughts, but we'll have to see whether
> anything comes from this.
>
> Now all we can wait for is an easier / prebuilt ipchains installation...
>
> Regards,
>
> Craig Foster
>
> ----- Original Message -----
> From: Christian <christian at global.net.au>
> To: <plug at linux.org.au>
> Sent: Friday, December 03, 1999 2:08 PM
> Subject: Re: [plug] telnet on Mandrake
>
> > *This message was transferred with a trial version of CommuniGate(tm) Pro*
> > On Fri, 3 Dec 1999, Kenworthy Family wrote:
> >
> > > Hi all,
> > >     I have just (well third time in three days) installed Mandrake 6.1
> > > and have not killed it this time around.  I have a problem in not being
> > > able to telnet into the box, either from another machine or using
> > > localhost or the machine name to itself.  ftp works fine which
> > > eliminates a lot of things - did it on each install, and last time tried
> > > before I did anything else so looks like something set up in Mandrake.
> > > Telnet connects then approx 10 seconds later disconnects - "remote host
> > > closed connection" or similar.  Any ideas where to look as I cannot find
> > > where such a restriction is set.
> >
> > It could be tcpwrappers: check /etc/hosts.allow and hosts.deny.  If
> > Mandrake are setting this up by default then they should be congratulated
> > for it -- it's about time someone shipped a mainstream Linux distribution
> > in something that vaguely resembles a secure configuration.
> >
> > Regards,
> >
> > Christian.
> >
> >
> ============================================================================
> > "Those who do not understand Unix are condemned to reinvent it, poorly."
> >                 -- Henry Spencer
> >
> >