UNIX for Dummies Questions & Answers

Hi, try this out.

goto /etc/default

You will find "telnetd" file(if not create it default permissions)

write this:

BANNER="Welcome to my machine or whatever"

This should help.

I've read the previous posts and have followed the steps outlined in http://www.enteract.com/~lspitz/armoring.html, yet I still can see that the system is using SVR4.

I created the telnetd file in /etc/default My sole entry in the file is:
BANNER=""

Any assistance would be greatly appreciated!

This might be off topic, but why not chunk telnetd all together in favor of sshd? Sending passwords across telnet is dangerous.

Saluja,

What version of Solaris are you using and is it Sparc or Intel?

I created the banner after running telnet and this was what I got (on Solaris 2.6 {sparc}):

# telnet some1
Trying 10.14.1.2...
Connected to some1.
Escape character is '^]'.


SunOS 5.6


Warning ! This system is for use only by persons authorized by Inc. By accessing this system you are consenting to system
monitoring for law enforcement and other purposes. Unauthorized use of this
system may subject you to criminal prosecution and penalties.

login:


# ls -l /etc/default/tel*
-rw-r--r-- 1 root other 10 Aug 20 1:44 /etc/default/telnetd
# cat /etc/default/telnetd
BANNER=""

# telnet some1
Trying 10.14.1.2...
Connected to some1.
Escape character is '^]'.


Warning ! This system is for use only by persons authorized by Inc. By accessing this system you are consenting to system
monitoring for law enforcement and other purposes. Unauthorized use of this
system may subject you to criminal prosecution and penalties.

login: Connection closed by foreign host.

Running SunOS 5.5.1 on a Sparc

As soon as I telnet to the box I get:

UNIX(r) System V Release 4.0

Not sure if I was reading your post correctly, but I tried modifying the telnetd file from my own session - didn't help. Also tried deleting the old telnetd file, rebooting system, and recreating the telnetd file - no joy here either.


Any other suggestions?

The banner option is supported on Solaris 2.6 and above. There is no work around for 2.5.1 and below. You would have to live with it or upgrade.

1st let me talk to my friend Auswipe.
Telnet is perfectly fine in a trusted network. I also work for a large company(telecom) and we have a "secure" firewall. I know what you are saying about sniffers gaining passwds over telnet, but telnet is a fairly safe way to do business in a "secure" environment.


NOW TO THE TOPIC AT HAND.

***************************
MY 2 cents... I know your question is regarding SUN, and my box is HPUX but there is another banner that is used.

/usr/localcw/opt/sysguard/banners


You might look under the directory /usr and search for a file with "banner" in the name.

The files that are under /etc are used on my box only for the bootup screens: namely /etc/issue and /etc/copyright.


Hope this helps even though it is HP and not SUN.