Baslinux mailing list

[sindi keesan <keesan AT sdf.lonestar.org>]

On Fri, 11 Mar 2005, David Moberg wrote:

> ----- Original Message -----
> From: "sindi keesan" <keesan AT sdf.lonestar.org>
>
> > in.telnetd worked fine for me.  Why are you discouraging its use?
>
> Security, security, security. Running a server on an OS like BL is
> begging for an attack.

I am only running it between two computers in the same room.  On top of 
which in.telnetd is set to allow logins only from user (I had to edit 
something to login as root but I would login as user to share a modem 
connection).  How would someone attack and do any damage as user?  All 
they could do is write files to /home/user (and even that is not possible 
until you chown -R user /home/user because user as it comes with BL2 can 
only execute a few programs, or read, not write to anywhere at all).

If we use this setup to share a modem connection, it still seems unlikely 
anyone would telnet from elsewhere to our dialed-in computer.

Can someone from outside damage our computer if we are running httpd?  Is 
that also accessible only as user?  (I will try it today along with the 
one just posted, and the new telnetd).

> > Is there a preferable way to share an internet connection?
>
> Get updated software and make sure to lock everything down to the
> bare minimum need to securely connect.

Are you assuming a DSL connection?

> David
> --
> _______________________________________________
> NEW! Lycos Dating Search. The only place to search multiple dating sites at 
> once.
> http://datingsearch.lycos.com
>
> _______________________________________________
> BasLinux mailing list
> BasLinux AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/baslinux

keesan AT sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org