Filter to block incoming ether0 telnet?

Chris Shenton (chris@absinthe.i3inc.com)
Fri, 16 May 1997 09:48:51 -0400

We manage our PM2 mostly via remote telnet and am concerned about the
"!root" password going over the WAN in the clear. I am unaware of any
alternatives, such as OTPs or ssh support.

I'd like to block access to the ether0 port for all connections except
those from our local ISP network, were we geeks login via ssh. That
way the password would only travel across our LAN segment clear-text.
If the PMconsole password passes in the clear, I'd like to block this
to from non-LAN hosts.

I haven't used filters before and don't want to screw up and lock
myself out completely, since I have limited access to the box.

Any suggestions?

Thanks.