deny non-tunnel'd services?

From: 'Ricky' S Dhatt (rdhatt@u.washington.edu)
Date: 04/26/02 

From: 'Ricky' S Dhatt <rdhatt@u.washington.edu>
Date: Thu, 25 Apr 2002 15:21:57 -0700

Forgive me if this not strictly an ssh question...

I have a remote linux box w/CVS server that I connect to via SSH tunnel;
I would like to setup it up to deny any connection that is not via SSH tunnel.
I tried using the only_from paramter in xinetd.conf = 127.0.0.1 but I get
an cvs error[1]. I also tried just allowing the IP I'm connecting from but I
get the same error.

When connecting via SSH tunnel does the connection appear any different to
the dameon? Just tring to find a condition that I can isolate...

Any help?

--Ricky

[1] cvs [login aborted]: recv() from server localhost: EOF

Relevant Pages

  • LinksysBEFSR41, openssh, puTTY and telnet problem
    ... What I'm trying to do is set up a ssh tunnel through my linksys BEFSR41 (4 ... port switch router) in order to allow secure connection to a linux app ...
    (comp.security.ssh)
  • change in semantics of socket(PF_INET, SOCK_STREAM, 0)?
    ... The connection is via an ssh tunnel, ... For vncviewer, the connect is the last call in the trace. ... it long enough, the connection times out. ... Since vnc used to work before, ...
    (freebsd-questions)
  • ssh: how to make it drop the connection when it is not connected?
    ... I've set up a ssh tunnel that runs at startup so that I can send mail ... The loop should make it maintain the connection when it drops. ... % telnet localhost 25 ... Escape character is '^]'. ...
    (comp.security.ssh)
  • Re: Two SLIME questions
    ... image over an SSH tunnel. ... slime-connect over a nonencrypted link. ... "Lisp connection closed unexpectedly: connection broken by ... Ring the bells that still can ring. ...
    (comp.lang.lisp)
  • Re: deny non-tunneld services?
    ... > I have a remote linux box w/CVS server that I connect to via SSH tunnel; ... > I would like to setup it up to deny any connection that is not via SSH tunnel. ... I'd shutdown the cvs server in inetd. ...
    (comp.security.ssh)