DSM-G600, DNS-3xx and NSA-220 Hack Forum

Unfortunately no one can be told what fun_plug is - you have to see it for yourself.

You are not logged in.

Announcement

#1 2008-03-18 21:49:03

ojve
Member
Registered: 2008-03-02
Posts: 28

block loopback telnet

Hi all.

I'm forwarding my SSH ports through my router for remote access, but I want to keep telnet running (password free) for my private network just in case. Is there any way to keep remote users logged in by ssh from just telneting the loopback interface and gain root access? Correct me if I'm wrong (which I often am:) ) but changing file permissions would require me to block users from accessing anything in busybox right?

thx.
//T

Last edited by ojve (2008-03-18 21:49:22)

Offline

 

#2 2008-03-18 21:57:06

oxygen
Member
Registered: 2008-03-01
Posts: 320
Website

Re: block loopback telnet

use login as shell instead of sh for telnet.

Offline

 

#3 2008-03-19 11:25:49

ojve
Member
Registered: 2008-03-02
Posts: 28

Re: block loopback telnet

well, the thing is I would like to keep the telnet password-free, just in case the webUI should happen to mess with the root password.

//T

Last edited by ojve (2008-03-19 11:26:57)

Offline

 

Board footer

Powered by PunBB
© Copyright 2002–2010 PunBB