Think this through, give a complete answer! How can you deny all
incoming telnet requests, while still allowing outgoing sessions. You
may not use TCP Wrappers as an answer, but you can take some hints!
(here's a freebie, hosts.allow and such are part of the TCP Wrappers
package).

---

Request for Question Clarification by sgtcory-ga on 08 May 2004 16:54 PDT

Hello tecate21,

Great question. If I understand it correctly, you could use an IPChain
or IPTable based firewall solution.

Is this a suitable solution or do you already have one that you want
us to correctly guess? ;-)

Thanks,
SgtCory

---

Request for Question Clarification by maniac-ga on 12 May 2004 18:13 PDT

Hello Tecate21,

The straight forward solution is to:
 - install a telnet program (as a client to initiate outgoing sessions)
 - do not install a telnet server (to thus deny all incoming requests)
However, you may be looking for something more thorough as an answer.
Can you explain what you are looking for in a "complete answer"?

  --Maniac

The generic answer is to disable the telnet server by editing it out
of /etc/inetd.conf and telling inetd to re-read it's config file with
something like 'kill -HUP `cat /var/run/inetd.pid`' but the specifics
will vary a bit depending on your vendor.

Another way to do this (in most cases) is by commenting the

telnet          23/tcp

line in /etc/services (like this:

# telnet          23/tcp

)

and then restarting inetd or xinetd.