Sponsored Content
Full Discussion: One Question about security
Special Forums Cybersecurity One Question about security Post 302074276 by System Shock on Monday 22nd of May 2006 10:56:01 AM
Old 05-22-2006
Quote:
Originally Posted by shereenmotor
Yeah, I can still su-->root on any terminal, how to stop that.?

About ssh, I'm still checking with my application provider. From above discussion:So I have concluded that I should not continue with telnet anymore and if ssh is not possible then I'll obviously go for VPN but not for an open telnet method.....

I'm planning to use ssh for remote access only and continue with telnet from local computers, that should be fine?

One stupid question here: Is it possible that my KCML client which uses telnet might be using its own encryption method with the telnet tunnel and decrypt the data at KCML server end which is located at UNIX box? Why I'm asking this question here not to my software provider because I just want to confirm if this is possible and I don't want to give those guys a chance of thinking me as a stupid Smilie Pls confirm the possibility.

Thanks for all your replies.

Best Regards,
Tayyab
Telnet is a protocol. No matter which application you use to telnet, it'll still function the same way. So telnetting with KCML will basically be the same as telnetting with the telnet command.

Let me stress that no method is 100% safe. Like I said in my previous post, if it's on a network, it can be hacked. The difference is in how difficult you make it for hackers to break in. And that is the key concept. I can give you a dozen analogies about not protecting the front doors, but think about this:

Hacker tries and tries and tries and tries to break in. Depending on the skill level of the hacker, after so many tries, if he/she can't get in, he/she will eventually give up and go to the next target: A script kiddie that has but a tool he/she downloaded from the net will not get anywhere, while an elite hacker may take more time depending on what he sees.

However, whatever level the hacker is, IF HE GETS IN, then he's bound to put forth a higher effort in going further in his hacking activity.

So it is all about putting enough barriers up front to discourage further hacking events.
And that's what you as an admin can do to protect your servers.

Now, user stupidity, well, that's another battle. Smilie
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

PostFix security question

I have a Postfix mail server running on my eMac, and been looking at /var/log/mail.log. I am new to administrating a mail server. I notice some servers tried to relay messages to unkown recipients in my server, and my Postfix denied access. The "from" and "rcpt to" look very phony. I did a... (3 Replies)
Discussion started by: fundidor
3 Replies

2. UNIX for Dummies Questions & Answers

UNIX Security Question

Can other users delete / replace this file if the directory and file have the following permissions /test drwxrwxrwx /test/file _rw_r__r__ I guess what I really want to know is what the security riskis of having teh directory completely open when the access to a particular file is... (3 Replies)
Discussion started by: OBCCBIP
3 Replies

3. UNIX for Dummies Questions & Answers

security question

I just wanted to know when dealing with key loggers, What would be a normal routine for searching them out. I really don't know what I am looking for other than odd process. Also packet sniffers. What are signs? (0 Replies)
Discussion started by: blanks
0 Replies

4. UNIX for Dummies Questions & Answers

Question: Unix Security

question deleted, because answered (2 Replies)
Discussion started by: kasa
2 Replies

5. Solaris

Java / SunOS Security question

Hi, I have a question about the Java that comes with the Solaris 9/10 OS. All my boxes are servers, only ssh allowed, no x windows, hardened, firewaled, etc... Their purpose is Oracle DB's and Sun One Dir servers. None of which use the OS version of Java as far as know. Question IS, can... (1 Reply)
Discussion started by: BG_JrAdmin
1 Replies

6. UNIX for Dummies Questions & Answers

Security Question

In an effort to adapt to best security practices, it has been suggested that a number of scripts that are going to be distributed to multiple machines across an internal network use be modified to replace instances of rsh and rcp with openSSH ssh and scp. Since there are so many references to rsh... (1 Reply)
Discussion started by: jasondj
1 Replies

7. Cybersecurity

Security question.

This may seems simple but I am unaware of this. Is there anyway to fetch the date & time of a user ID created on AIX? (actually I need answer for HP-UX,Solaris & Linux as well. But AIX is what I am most interested in.) I use ls command but it does not show the creation date. It just shows the... (2 Replies)
Discussion started by: raj100
2 Replies

8. Cybersecurity

Question on a security package on linux

Hello everyone , I want to implement a new firewall, detection system on my network composed of some 200 computers as follows: The fire wall would be a linux box with router, L7 iptable and also snort as IDPS system. These are my questions: 1. Is there any security consideration regarding... (0 Replies)
Discussion started by: ahmedkamel
0 Replies

9. Cybersecurity

Web hosting security question

Hi, Recently my has been hacked. A .pl script has been uploaded in the root of the directory, which uploaded lot of unwanted files and changed their file permission to 777. I have no clue how did they upload that .pl file in my hosting. Website is in shared hosting. Could they access my web... (3 Replies)
Discussion started by: agriz
3 Replies

10. AIX

AIX IP security question

Recently the network auditor found a security hole at port 50000. The port 50000 is used by db2. When I enter command "netstat -Aan |grep 50000", it showed some established connections and are all db2 processes. I have asked the application team and they answered that the port 50000 connection... (2 Replies)
Discussion started by: skeyeung
2 Replies
Regexp::Common::URI::telnet(3)				User Contributed Perl Documentation			    Regexp::Common::URI::telnet(3)

NAME
Regexp::Common::URI::telnet -- Returns a pattern for telnet URIs. SYNOPSIS
use Regexp::Common qw /URI/; while (<>) { /$RE{URI}{telnet}/ and print "Contains a telnet URI. "; } DESCRIPTION
$RE{URI}{telnet} Returns a pattern that matches telnet URIs, as defined by RFC 1738. Telnet URIs have the form: "telnet:" "//" [ user [ ":" password ] "@" ] host [ ":" port ] [ "/" ] Under "{-keep}", the following are returned: $1 The complete URI. $2 The scheme. $3 The username:password combo, or just the username if there is no password. $4 The username, if given. $5 The password, if given. $6 The host:port combo, or just the host if there's no port. $7 The host. $8 The port, if given. $9 The trailing slash, if any. REFERENCES
[RFC 1738] Berners-Lee, Tim, Masinter, L., McCahill, M.: Uniform Resource Locators (URL). December 1994. SEE ALSO
Regexp::Common::URI for other supported URIs. AUTHOR
Damian Conway (damian@conway.org) MAINTAINANCE
This package is maintained by Abigail (regexp-common@abigail.be). BUGS AND IRRITATIONS
Bound to be plenty. LICENSE and COPYRIGHT This software is Copyright (c) 2001 - 2009, Damian Conway and Abigail. This module is free software, and maybe used under any of the following licenses: 1) The Perl Artistic License. See the file COPYRIGHT.AL. 2) The Perl Artistic License 2.0. See the file COPYRIGHT.AL2. 3) The BSD Licence. See the file COPYRIGHT.BSD. 4) The MIT Licence. See the file COPYRIGHT.MIT. perl v5.18.2 2013-03-08 Regexp::Common::URI::telnet(3)
All times are GMT -4. The time now is 09:28 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy