Re: How to protect telnet port on IIS?

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 05/25/03

  • Next message: Karl Levinson [x y] mvp: "Re: Secure Intranet from Active Directory"
    Date: Sun, 25 May 2003 08:35:12 -0400
    
    

    In addition to the other posts, it is not the best idea to use Telnet across
    the internet, as all commands and passwords are passed in clear text which
    can be sniffed. You could use IPsec VPN to encrypt the Telnet session, but
    it's probably easier to just use SSH which is similar to telnet, only
    encrypted. See www.networksimplicity.com for some SSH solutions for
    Windows.

    If you do insist on using Telnet, there are a few things you want to do to
    secure it, such as make sure all Windows service packs and patches are
    installed, change the permissions as to who can log into telnet, etc. For
    further info, try searching www.google.com and/or www.microsoft.com/support

    The link below also helps you increase your Telnet or IIS web server's
    general security:

    http://securityadmin.info/faq.htm#harden

    "JJ" <noway@jose.com> wrote in message
    news:#06hFQgIDHA.672@tk2msftngp13.phx.gbl...
    > I would like to access our IIS telnet port (80) from the outside (from
    > home). Whats the best way to securily do this? Does IIS have any built in
    > mechanisms I can configure? 3rd party tools?
    >
    >
    > Thanks
    > JJ
    >
    >
    >


  • Next message: Karl Levinson [x y] mvp: "Re: Secure Intranet from Active Directory"