Re: Hardening a Solaris system.

From: Casper H.S. Dik (Casper.Dik_at_Sun.COM)
Date: 11/22/03 

Date: 22 Nov 2003 12:18:05 GMT

gerryt@gtconnect.net () writes:

>Solaris 9 comes with their own version of ssh
>If you have tcp_wrappers installed you can easily deny
>access to port 22 except for trusted IPs..

Solaris 9 comes with "tcp_wrappers" support; (based on the IPv6 version
I did); the ssh daemon is linked with that library as ldd will show.

>That leaves port 111 (rpcbind) - there is a tcp_wrapper
>version in source at playground.sun.com :
>ftp://playground.sun.com/pub/rpc

Note that that is still based on an older version of rpcbind; it's probably
best dealt with using ipfilter/SunScreen; note that protecting rpcbind does
not protect the services.

Casper