warning message summary

2007-12-25 7:55:00

Several weeks ago, I wrote:

I have been looking for way to able to output a message to a user

before he or she sees the login message on our Sun 3's and 4'ss. I

especially need this when someone tries to telnet or ftp to our Suns.

We are running under SunOS 4.1.1.. Does anyone have a solution to this

problem?

Thanks to all who replied to my problem. I had many replies. The

following is a summary of the various solutions.

1) Put the warning message in /etc/motd, the message of the day.

I already did this before but this is seen only after one signs onto

the computer.

2) Use a "wrapper" for in.telnetd. Change the line in /etc/inetd.conf

from

telnet stream tcp nowait root /usr/etc/in.telnetd in.telnetd

telnet stream tcp nowait root /.../telnet.msg in.telnetd

Telnet.msg is simply a script that outputs the warning and then invokes the telnet daemon process. Where this script lives is up to you - ours is in /usr/local/scripts. An example is:

#!/bin/sh

/usr/5bin/echo

/usr/5bin/echo "_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_] \r"

/usr/5bin/echo "_] _] \r"

/usr/5bin/echo "_] THIS IS A PRIVATE COMPUTING SYSTEM, _] \r"

/usr/5bin/echo "_] RESTRICTED TO AUTHORIZED USERS. _] \r"

/usr/5bin/echo "_] _] \r"

/usr/5bin/echo "_] UNAUTHORIZED ACCESS OR USE WILL _] \r"

/usr/5bin/echo "_] RESULT IN PROSECUTION. _] \r"

/usr/5bin/echo "_] _] \r"

/usr/5bin/echo "_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_]_] \r"

/usr/5bin/echo

exec in.telnetd

This solved the problem regarding telnet.

3) Another common response was about using this type of entry in the

/etc/gettytab file:

:im=\r\n\r\n\r\n\r\n NOTICE\072 THIS PRIVATE SYSTEM IS RESTRICTED TO AUTHORIZED USERS.\r\n UNAUTHORIZED ACCESS OR USE WILL RESULT IN PROSECUTION.\r\n\r\n\n\n\n%h :\ :sp#9600:

This was already implemented on our machines. This only works on consoles.

4) Here is another response for telnet. There is a package to log TCP

service requests and to restrict access. It can be modified to put

out messages before starting up a telnet session. It is available

by anonymous ftp on:

ux.cso.uiuc.edu:/net/log_tcp

5) Here is another solution for telnet which is similar to the one involving

a wrapper.

Use the following program telnetd.banner.c

main ()

{

system("/bin/cat /etc/telnetbanner");