login & dtlogin query

From: Sriram S. - CTD, Chennai. (sriram_s@ctd.hcltech.com)
Date: 04/09/03

  • Next message: Derek J. Balling: "identity file permissions" 
    From: "Sriram S. - CTD, Chennai." <sriram_s@ctd.hcltech.com>
To: secureshell@securityfocus.com
Date: Wed, 9 Apr 2003 17:15:02 +0530

    I have a query regarding login and dtlogin. Here you go and help me out.
    If am testing a product for which the supported connection tools are
    explicitly given as login, telnet, rlogin, su, ftp, OpenSSH. In this case,
    do I need to test also "dtlogin" in Solaris. And if am to test dtlogin, its
    supposed to be listed as a supported tool explicitly. Am i right ? I feel
    login doesn't include dtlogin. Am I rite ?

    Thanks
    Sriram S

    -----Original Message-----
    From: Ball, Duncan [mailto:duncan.ball@eds.com]
    Sent: Tuesday, April 01, 2003 1:29 PM
    To: 'Sriram S. - CTD, Chennai.'; Martinez, Michael - CSREES/ISTM;
    secureshell@securityfocus.com
    Subject: RE: Question on how to set up client browser -> DMZ machine ->
    po rt f orwarded to port 80 on LAN machine?

    How are you expecting the sshd to establish authentication? sshd doesn't
    talk HTML/HTTP. Surely what you're looking for is a proxy/cache like squid
    to perform authentication?

    Duncan Ball
    Adelaide, Saaarf Australia

    -----Original Message-----
    From: Sriram S. - CTD, Chennai. [mailto:sriram_s@ctd.hcltech.com]
    Sent: Monday, 31 March 2003 11:17 PM
    To: Martinez, Michael - CSREES/ISTM; secureshell@securityfocus.com
    Subject: RE: Question on how to set up client browser -> DMZ machine ->
    po rt f orwarded to port 80 on LAN machine?
    Importance: High

    You could just edit the /etc/services file of your remote server machine and
    change the port number for sshd to 80 (comment the existing service name for
    port 80) and restart the sshd daemon and try it out. Could help you out
    better.

    Thanks
    Sriram S

    -----Original Message-----
    From: Martinez, Michael - CSREES/ISTM
    [mailto:MMARTINEZ@intranet.reeusda.gov]
    Sent: Friday, March 28, 2003 7:40 PM
    To: secureshell@securityfocus.com
    Subject: Question on how to set up client browser -> DMZ machine -> port
    f orwarded to port 80 on LAN machine?

    Question on how to set up the following:

    I want to be able to have someone on the Internet point their browser to
    port 80 on my Linux box that sits in the DMZ. This Linux box does not run a
    web server. But I want sshd to listen to port 80 ... Authenticate the user
    .... And then once the user is authenticated, set up connection from the
    client browser to a web server behind the firewall.

    How to achieve this?

    Quick responses please.

    Martinez, Michael
    CSREES/ISTM/USDA

  • Next message: Derek J. Balling: "identity file permissions"

    Relevant Pages

    • RE: Question on how to set up client browser -> DMZ machine -> po rt f orwarded to port 80 on
      ... How are you expecting the sshd to establish authentication? ... po rt f orwarded to port 80 on LAN machine? ... Question on how to set up client browser -> DMZ machine -> port ...
      (SSH)
    • How did this happen?
      ... May 12 06:50:43 localhost sshd: Failed password for illegal user ... cgi from 212.93.149.205 port 2265 ... Starting sshd: ...
      (comp.os.linux.security)
    • Re: bypassing employers proxy to surf anonymously
      ... port 443, so it's harder to distinguish from an https server. ... through the remote sshd. ... You have an option to go with a managed service or an enterprise software. ...
      (Pen-Test)
    • Re: ssh under attack - sessions in accepted state hogging CPU
      ... I haven't tried this specific port knocking sequence but you could setup a knock where if a user attempts to connect to port 22 say 3 times it then opens up port 22 to that ip and allows them to connect to sshd. ... I'm working on getting sshguard+ipfw in place to deal with it, but in the meantime, my box is getting pegged because sshd is accepting some connections which are getting stuck in state and eating CPU. ...
      (freebsd-questions)
    • RE: possible ssh hack
      ... What version of SSHD were you running, ... Apache and we can help you out. ... Subject: possible ssh hack ... port 4207 ...
      (Incidents)