M e r i d i a n I I U s e r M a n u a l
60
C H A P T E R F I V E
61
M e r i d i a n I I U s e r M a n u a l
S E C U R I T Y
This tells
tcpd
to deny access to
in.telnetd, sshd
and
snmpd
to all hosts not listed in the
/etc/
hosts.allow
file. The
snmpd
and
sshd
daemons also parse this file directly prior to granting access to
a requesting host.
Next you will be prompted to enter a list of hosts that will be granted access to
in.telnetd
,
sshd
and
snmpd
. These appear in the
/etc/hosts.allow
as lines like this:
in.telnetd: 192.168.1.2, 192.168.1.3
sshd: 192.168.1.2, 192.168.1.3
snmpd: 192.168.1.2, 192.l68.1.3
This simple shell script handles the needs of most users, however the syntax of these two files sup-
ports elaborate configuration possibilities which are beyond the capabilites of this simple shell script.
Advanced users who need these capabilities will need to edit these two files directly and then copy
them to the
/boot/etc
directory. (See
Appendix C - Helpful Linux Information, Using Editors
.) Be
careful to maintain the proper ownership and access permissions by using
cp -p
when copying the
files.
Restrict Access - HTTPS
To control access via HTTPS, you must edit the
/etc/httpd/httpd.conf
file and add the equivalent deny
followed by allow directives. For example, the default file contains these lines:
<Directory />
AllowOverride none
Require all denied
</Directory>
To restrict access to a specific host, you would begin by modifying this directive as follows:
<Directory />
AllowOverride none
Require all granted
</Directory>
Next, the default file contains these lines that must be edited:
# Controls who can get stuff from this server.
#
Require all granted
To complete the configuration steps to restrict access and allow a specific host with IP address
xxx.xxx.xxx.xxx, you would modify the directives as follows:
# Controls who can get stuff from this server.
#
Order Deny,Allow
Deny from all
Allow from xxx.xxx.xxx.xxx
Summary of Contents for Meridian II
Page 2: ......
Page 20: ...M e r i d i a n I I U s e r M a n u a l This page intentionally left blank...
Page 139: ...119 M e r i d i a n I I U s e r M a n u a l R E A R P A N E L I O...
Page 216: ...M e r i d i a n I I U s e r M a n u a l 196 A P P E N D I X J...
Page 235: ...215 M e r i d i a n I I U s e r M a n u a l S P E C I F I C AT I O N S...
Page 236: ...M e r i d i a n I I U s e r M a n u a l 216 A P P E N D I X K...
Page 239: ......
