2
votes
1answer
23 views

Preventing SecAst access from across the network

I have SecAst up and running great, and I realize that any workstation on the network can access the SecAst telnet interface. Is there a way to limit this to only my laptop? I don't want one of the ...
1
vote
1answer
43 views

How can I determine which users are authenticating via ftp or telnet?

I've inherited a system that has both telnet and ftp enabled. As both these send passwords in cleartext I want to disable them. But many users have never changed their ways to use sftp or ssh. And ...
9
votes
6answers
12k views

How to check that an OpenVPN server is listening on a remote port without using OpenVPN client?

I need to check that an OpenVPN (UDP) server is up and accessible on a given host:port. I only have a plain Windows XP computer with no OpenVPN client (and no chance to install it) and no keys needed ...
0
votes
4answers
2k views

how to protect telnet access to smtp port 25?

Please consider the following: 192-168-1-106:~ michael$ telnet <remote_server_ip> 25 Trying <remote_server_ip>... Connected to li*****.linode.com. Escape character is '^]'. 220 ...
2
votes
5answers
623 views

Why does anyone use ftp?

I am a newbie, so maybe I'm missing something. Why would anyone use ftp or telnet for site administration? If they use them, why would they wonder how they've been hacked? Isn't it obvious that all ...
1
vote
3answers
158 views

Is it normal for port 23 to be connected to periodically?

While working at a customer site (a LAN that includes several Windows machines, plus our server) I noticed that something was periodically attempting to connect to our server on port 23 via TCP. ...
25
votes
9answers
2k views

Is packet sniffing for passwords on a fully switched network really a concern?

I administer a number of linux servers that require telnet access for users. Currently the user's credentials are stored locally on each server and the passwords tend to be very weak and there is no ...
0
votes
3answers
3k views

How can I use PAM to restrict telnet login by user?

Regrettably I need to enable telnet for a single user on a Linux machine. Everyone else will have to use ssh. How do I configure PAM to restrict which users may login via the telnet server?
5
votes
5answers
476 views

If I use ftp or telnet by accident, to what extent is my password unsafe?

if i use ftp or telnet by accident (usually on the bash shell), to what extend is my password visible? can my coworker see it? can my neighbor see it if i work at home (if not using wireless)? can ...