Chapter 5 Remote Access Security Administration

Table of Contents

Overview of Internet Services and Remote Access Services

Securing ftp
Securing Anonymous ftp
Denying Access Using /etc/ftpd/ftpusers
Other Security Solutions for Spoofing

The inetd Daemon

Securing inetd

Protection Against Spoofing with TCP Wrappers

Additional Features of TCP Wrappers
TCP Wrappers Do Not Work with RPC Services

Secure Internet Services

Controlling an Administrative Domain

Verifying Permission Settings on Network Control Files

Securing Remote Sessions Using HP-UX Secure Shell (SSH)

Key Security Features of HP-UX Secure Shell
Software Components of HP-UX Secure Shell
Running HP-UX Secure Shell
HP-UX Secure Shell Privilege Separation
HP-UX Secure Shell Authentication
Communication Protocols
HP-UX Secure Shell and the HP-UX System
Associated Technologies
Strong Random Number Generator Requirement
TCP Wrappers Support
chroot Directory Jail

HP-UX provides several remote access services, such as file transfer, remote login, remote command execution, management of IP addresses and network clients, routing protocols, mail exchange, network services, and a security mechanism spawned by inetd, the Internet super daemon.

This chapter discusses the following topics:

Overview of internet services and remote access services (Section )
The inetd Daemon (Section )
Protection against spoofing with TCP wrappers (Section )
Secure internet services (Section )
Controlling an administrative domain (Section )
Securing remote sessions using HP-UX Secure Shell (SSH) (Section )

Chapter 5 Remote Access Security Administration

Technical documentation

» Table of Contents

» Glossary

» Index