Download User Manual - EndRun Technologies

SECURITY
This tells tcpd to deny access to in.telnetd, sshd and snmpd to all hosts not listed in the /etc/
hosts.allow file. The snmpd and sshd daemons also parse this file directly prior to granting access to
a requesting host.
Next you will be prompted to enter a list of hosts that will be granted access to in.telnetd, sshd
and snmpd. These appear in the /etc/hosts.allow as lines like this:
in.telnetd: 192.168.1.2, 192.168.1.3
sshd: 192.168.1.2, 192.168.1.3
snmpd: 192.168.1.2, 192.l68.1.3
This simple shell script handles the needs of most users, however the syntax of these two files supports elaborate configuration possibilities which are beyond the capabilites of this simple shell script.
Advanced users who need these capabilities will need to edit these two files directly and then copy
them to the /boot/etc directory. (See Appendix C - Helpful Linux Information, Using Editors.) Be
careful to maintain the proper ownership and access permissions by using cp -p when copying the
files.
Restrict Access - HTTPS
To control access via HTTPS, you must edit the /etc/httpd/httpd.conf file and add the equivalent deny
followed by allow directives. For example, the default file contains these lines:
<Directory />
AllowOverride none
Require all denied
</Directory>
To restrict access and allow a specific host with IP address xxx.xxx.xxx.xxx, you would modify the
directives as so:
<Directory />
Require host xxx.xxx.xxx.xxx
</Directory>
After making your changes, you must copy the edited file to the non-volatile FLASH area:
cp -p /etc/httpd/httpd.conf /boot/etc/httpd
Restrict Query Access - NTP
The Network Time Protocol (NTP) implementation in the Sonoma is built from the reference distribution from:
http://www.ntp.org
By factory default, remote control and query of the NTP daemon ntpd is disabled. Query-only operation is supported only from processes running on the Sonoma itself, i.e. from the localhost. This
restricts access to ntpd from remote hosts using either of the two NTP companion utilities ntpq and
ntpdc.
43
Sonoma User Manual