how to stop using *telnet <domain> 25*

[Ken Moffat]

Swapana Ghosh wrote:

>Hi
>
>--- Bill Campbell <linux-sxs at celestial.com> wrote:
>  
>
>>On Fri, Jan 23, 2004, Swapana Ghosh wrote:
>>...
>>    
>>
> 
> (b) it would prevent your own roaming users
>  
>
>>from sending mail from outside your network.
>>
>>    
>>
> 
>Yes that is the main problem. We can't stop any users mails. By the way
>*telnet* port is closed for all our servers -  that is from our server level, 
>but how to stop others from telnet and using port 25.
>
>Thanks again
>-Swapna
>
>
>  
>


Do you know who you want to block?
How about using /etc/hosts.allow:
in.telnetd : 192.168.1.100
in.telnetd : *.example.com
in.telnetd : ALL : DENY

I think this would allow only 192.168.1.100 and *.example.com to access 
telnet?

Or how about blocking the port and using ssh tunnelling? (I'm reading 
about that...) Access by key only?

-- 
Ken