Telnet/Rsh


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Telnet/Rsh
# 8  
Old 09-06-2001
Ok , This is the update from wat problem I had with my Sun m/c
This problem is peculiar in m/cs which were hacked ....
Usually the hacker changes the login program in /usr/bin , so that one cannot remote login using telnet and rlogin

U can find out which programs have been modified using the md5 binaries listed in SUN Site and check the fingerprint with the SUN FINGERPRINT Database . (In my case login was modified)

Temporary soln will be to replace the files which have been modified .
Long Term would be to Re-install the OS and load all the patches ....

Thanx for all the help given



Last edited by DPAI; 09-06-2001 at 12:14 AM..
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. AIX

RCP slow down and blocks login, telnet, rsh, etc on target server

Hello I have a LPAR AIX 6.1 on Power VM, Vio 2.2.3 and when I execute a rcp to this machine, I cant, simultaneosly, rlogin, telnet, rsh to this same LPARt. This commands stay hanged till the copy end, and Imeddiatlely the comand is executed (rlogin, telnet, rhs, etc). Someone can give me... (1 Reply)
Discussion started by: artur_dietrich
1 Replies

2. AIX

Telnet or rsh takes too much time

telnet or rsh or ftp to an AIX machine takes too much time, like have to wait 3 minutes before the prompt appears. What can I look to troubleshoot this problem thanks (4 Replies)
Discussion started by: filosophizer
4 Replies

3. UNIX for Dummies Questions & Answers

Difference Between Krb5-telnet And Ekrb5-telnet

Hi, I want to know the difference between these two services. Both are under xinetd. Both are used for enabling and disabling Telnet service. So, can somebody please explain me the difference between the two ? Thanks in advance :) (0 Replies)
Discussion started by: kashifsd17
0 Replies

4. UNIX for Dummies Questions & Answers

Automatically login in the telnet from present telnet

Hi, I was writing one script which includes to switch to the another telnet automatically from the present telnet server. I was using rlogin but firstly it takes the same user name of the present telnet and secondly it is prompting for the password. But i want to switch to the another telnet... (2 Replies)
Discussion started by: Prateek
2 Replies

5. Shell Programming and Scripting

Webpage to Telnet via Perl and Expect: Telnet problem?

Somewhat long story: I have a simple Perl CGI script that uses Expect to Telnet to a device and grab some data, and then spits it back to Perl for display on the Webpage. This works for many devices I've tried, but one device just fails, it keeps rejecting the password on this device, only... (1 Reply)
Discussion started by: jondo
1 Replies

6. UNIX for Advanced & Expert Users

Rsh

Hi All, I want to execute a command from my Windows machine to Linux machine using RSH only d:> rsh <Linux machine add> -l <user_name> pwd>dir in linux machine users home directory in .rhosts file I entered the windows machine IP address and user name. In linux etc/hosts.equiv file I... (1 Reply)
Discussion started by: sarwan
1 Replies

7. Linux

Help in RSH

Hi All, I want to execute a command from my Windows machine to Linux machine. d:> rsh <Linux machine add> -l <user_name> pwd>dir in linux machine users home directory in .rhosts file I entered the windows machine IP address and user name. In linux etc/hosts.equiv file I entered the... (1 Reply)
Discussion started by: sarwan
1 Replies

8. Solaris

Can ftp but not telnet/ssh/rsh

Hi , I have a Solaris 9 machine in which I can ftp but telnet/rsh/ssh is not working, although it was working before. I cannot also log in through the console. I get the banner for telnet but it kicks me out. Any ideas? rte (2 Replies)
Discussion started by: run_time_error
2 Replies

9. UNIX for Dummies Questions & Answers

help on rsh

hi friends, i've access to three machines mc1,mc2,mc3,on which i can log in as root. and in order to run a simple command on a remote machine(say remote) on which i cant log in,i use a command as; # rsh remote ls the above runs properly but if i do an ls on following it doesnt work # rsh mc2... (1 Reply)
Discussion started by: mxms755
1 Replies

10. Shell Programming and Scripting

help with rsh

I am trying to run a Perl script using rsh. I need to be able to capture the return code value, so the calling script can handle failures properly. I cannot modify the Perl script I need to run because we use it for all of our servers. Does anyone have a suggestion? (1 Reply)
Discussion started by: kscase
1 Replies
Login or Register to Ask a Question
TCPD(1M)																  TCPD(1M)

NAME
tcpd - access control facility for internet services DESCRIPTION
The tcpd program can be set up to monitor incoming requests for telnet, finger, ftp, exec, rsh, rlogin, tftp, talk, comsat and other ser- vices that have a one-to-one mapping onto executable files. The program supports both 4.3BSD-style sockets and System V.4-style TLI. Functionality may be limited when the protocol underneath TLI is not an internet protocol. Operation is as follows: whenever a request for service arrives, the inetd daemon is tricked into running the tcpd program instead of the desired server. tcpd logs the request and does some additional checks. When all is well, tcpd runs the appropriate server program and goes away. Optional features are: pattern-based access control, client username lookups with the RFC 931 etc. protocol, protection against hosts that pretend to have someone elses host name, and protection against hosts that pretend to have someone elses network address. LIBWRAP INTERFACE
The same monitoring and access control functionality provided by the tcpd standalone program is also available through the libwrap shared library interface. Some programs, including the Solaris inetd daemon, have been modified to use the libwrap interface and thus do not require replacing the real server programs with tcpd. The libwrap interface is also more efficient and can be used for inetd internal ser- vices. See inetd(1M) for more information. LOGGING
Connections that are monitored by tcpd are reported through the syslog(3) facility. Each record contains a time stamp, the client host name and the name of the requested service. The information can be useful to detect unwanted activities, especially when logfile information from several hosts is merged. In order to find out where your logs are going, examine the syslog configuration file, usually /etc/syslog.conf. ACCESS CONTROL
Optionally, tcpd supports a simple form of access control that is based on pattern matching. The access-control software provides hooks for the execution of shell commands when a pattern fires. For details, see the hosts_access(4) manual page. HOST NAME VERIFICATION
The authentication scheme of some protocols (rlogin, rsh) relies on host names. Some implementations believe the host name that they get from any random name server; other implementations are more careful but use a flawed algorithm. tcpd verifies the client host name that is returned by the address->name DNS server by looking at the host name and address that are returned by the name->address DNS server. If any discrepancy is detected, tcpd concludes that it is dealing with a host that pretends to have someone elses host name. If the sources are compiled with -DPARANOID, tcpd will drop the connection in case of a host name/address mismatch. Otherwise, the host- name can be matched with the PARANOID wildcard, after which suitable action can be taken. HOST ADDRESS SPOOFING
Optionally, tcpd disables source-routing socket options on every connection that it deals with. This will take care of most attacks from hosts that pretend to have an address that belongs to someone elses network. UDP services do not benefit from this protection. This feature must be turned on at compile time. RFC 931 When RFC 931 etc. lookups are enabled (compile-time option) tcpd will attempt to establish the name of the client user. This will succeed only if the client host runs an RFC 931-compliant daemon. Client user name lookups will not work for datagram-oriented connections, and may cause noticeable delays in the case of connections from PCs. Warning: If the local system runs an RFC 931 server it is important that it be configured NOT to use TCP Wrappers, or that TCP Wrappers be configured to avoid RFC 931-based access control for this service. If you use usernames in the access control files, make sure that you have a hosts.allow entry that allows the RFC 931 service (often called "identd" or "auth") without any username restrictions. Failure to heed this warning can result in two hosts getting in an endless loop of consulting each other's identd services. EXAMPLES
ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +--------------------+-----------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +--------------------+-----------------+ |Availability | SUNWtcpd | +--------------------+-----------------+ |Interface Stability | Committed | +--------------------+-----------------+ NOTES
Source for tcp_wrappers is available in the SUNWtcpdS package. TCPD(1M)