Telnet.


Telnet, like ssh, enables a remote login to a Linux machine on port 23, either over the internet, or from an internal network, either way I would not recommend using telnet on a Linux server unless a particular software package requires it. Telnet is too insecure due to the fact that all data, including passwords are sent in plain text with no encryption whatsoever!! It’s a piece of cake to exploit the holes that a telnet connection creates. If you require remote shell logins for administration purposes you should consider using ssh, it much safer.

To make sure that there is no risk you could remove the telnet daemon, close the telnet port in the inetd.conf file, & ensure that the firewall refuses all telnet connections.



back a page    back to main index    forward a page
copyright 2001 Rob Hawke.
rob@highasakite.net