locking down a sun server 1

[stevenriz]

We have a SUN box NATed on the internet. It is running Solaris 2.6. How could we lock it down so that nobody from the internet can log into it?
1. Is SSH free somewhere that I can install?
2. Can we somehow only allow private IP addresses to telnet into the box?
3. If we go with SSH, how do we turn off telnet?

 

[cfsalmeida]

openssh is free and easy to install/setup, you will also need "openssl" to successfully install openssh.

you can disable services like telnet in super daemon configuration edit "/etc/inetd.conf", and comment the line where is "telnet":

#telnet stream tcp ...

then restart inetd by send HUP signal to is pid, i.e:

# ps -ef | grep inetd
root 218 1 0 Jun 28 ? 1:16 /usr/sbin/inetd -s
# kill -HUP 218

Hope this helps,

Regards,

Carlos Almeida,