[asterisk-dev] Asterisk Network Security Idea (using tcp_wrappers)

Joseph Benden joe at thrallingpenguin.com
Sun Mar 29 17:06:50 CDT 2009


On Mar 29, 2009, at 5:44 PM, Venefax wrote:

> Can you elaborate about the "Rsh" problem? Maybe I am fool and just  
> found
> out.
> F.A.

This is off topic now, but if you want to know more about Rlogin and  
friends, and the security issue, see:

http://www.cert.org/archive/pdf/98tr017.pdf

If you search Google for "Rsh security" or "Rlogin security", you can  
find more info.

Summary: Please, please, do yourself a favor. If it's enabled on your  
systems, disable it! Use the Ssh/Scp/Sftp tools.

Thanks,
-Joseph Benden




More information about the asterisk-dev mailing list