The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Special Forums > Security
Google UNIX.COM


Security Anything involving computer security goes here.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
rlogin asadlone Shell Programming and Scripting 4 05-19-2008 03:33 AM
rlogin seaten Shell Programming and Scripting 3 05-13-2005 02:01 AM
rlogin seaten UNIX for Dummies Questions & Answers 2 05-12-2005 05:42 AM
Rlogin??? merlin UNIX for Dummies Questions & Answers 1 01-14-2003 04:42 AM
rsh & rlogin Inbal UNIX for Dummies Questions & Answers 2 04-24-2002 11:02 AM

Reply
 
Submit Tools LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-27-2006
Registered User
 

Join Date: Jan 2006
Posts: 71
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
not allow rlogin

does anyone know how to stop rlogin to my sunsolaris

so I have 2 machines...I can not telnet one becouse that is not allowed but I can telnet the other and do rlogin to first one..I want to stop that..

so..

telnet A from C machine - works
telnet B from C machine - does not work
but telent A from C and then rlogin B - works
that should be stopped...

any help?? please...
Reply With Quote
Forum Sponsor
  #2 (permalink)  
Old 02-27-2006
RTM's Avatar
RTM RTM is offline
Hog Hunter
 
Join Date: Apr 2002
Location: On my motorcycle
Posts: 3,039
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
There are a couple of things you can look at - it matters what your servers are using and how they are set up.

You can either look into changing on server B your /etc/hosts.allow and/or /etc/hosts.deny files (if you are using tcp wrappers), OR, you can shutdown the rsh services in /etc/inetd.conf. See the man page for inetd.conf and inetd.

You can also look to see if /etc/hosts.equiv exist - it may be granting the access there.

Before changing anything - you need to understand what it may do to something that IS okay between these servers (maybe remote copy is needed so turning off all rsh services would not be the way to go).
Reply With Quote
  #3 (permalink)  
Old 02-27-2006
Registered User
 

Join Date: Jan 2006
Posts: 71
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
helloo thanks for answerss...

I have on my system /etc/inetd.conf and there are lines

#
# Shell, login, exec, comsat and talk are BSD protocols.
#
shell stream/BSD tcp nowait root /usr/sbin/in.rshd in.rshd
login stream tcp nowait root /usr/sbin/in.rlogind in.rlogind
exec stream/BSD tcp nowait root /usr/sbin/in.rexecd in.rexecd
talk dgram/BSD udp wait root /usr/sbin/in.talkd in.talkd
# remove comment in next line, when using bsd sendmail and biff
#comsat dgram udp wait root /usr/sbin/in.comsat in.comsat

so if I put # in front of login...should I deny by that rlogin to my machine or ...??
also my sun solaris does not have /etc/hosts.equiv...and there are no
/etc/hosts.allow and /etc/hosts.deny files...

thanks

looking forward of hearing answers...
Reply With Quote
  #4 (permalink)  
Old 02-28-2006
RTM's Avatar
RTM RTM is offline
Hog Hunter
 
Join Date: Apr 2002
Location: On my motorcycle
Posts: 3,039
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
Before you comment out anything, make sure you have a way to the system (such as console) in case changing it cuts off all access. Suggest you start a session onto the box on console as root so you can back out of any change in case it does more than just remove rlogin.
Reply With Quote
Google UNIX.COM
Reply

Thread Tools
Display Modes


The 50 most popular UNIX and Linux searches.
Google Search Cloud for The UNIX and Linux Forums
421 service not available, remote server has closed connection ^m automate ftp autosys awk trim bash eval bash for loop boot: cannot open kernel/sparcv9/unix command copy/move folder in unix curses.h cut command in unix daemon process find grep find mtime find null character in a unix file from ip can we get machine name +unix glance unix grep multiple lines grep or grep recursive how to redirect console logs in unix inaddr_any inappropriate ioctl for device lynx javascript mailx attachment mget mtime perl array length ping port remove first character from string in k shell replace space by comma , perl script scp recursive segmentation fault(coredump) sftp script snoop unix stale nfs file handle syn_sent tar exclude tar extract to folder unix unix .profile unix forum unix forums unix internals unix interview questions unix mtime unix simulator unix.com vi substitute while loop within while loop shell script


All times are GMT -7. The time now is 12:13 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger Visit The Global Fact Book

Content Relevant URLs by vBSEO 3.2.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101