Need to Restrict TFTP Access

manusys · 11-20-2009, 05:09 AM

Hi,

I have configured tftp server. I need to restrict tftp access. Is there any otpion in /etc/xinet.d/tftp config file ??

I have tried in /etc/xinet.d/tftp config file but no luck.

Please suggest.

Thanks & Regards
manusys

centosboy · 11-20-2009, 06:18 AM

Quote:

Originally Posted by manusys

Hi,

I have configured tftp server. I need to restrict tftp access. Is there any otpion in /etc/xinet.d/tftp config file ??

I have tried in /etc/xinet.d/tftp config file but no luck.

Please suggest.

Thanks & Regards
manusys

you absolutely can do this using the only_from directive
can we see how you are trying to achieve this??

you can also do it with tcp wrappers (/etc/hosts.deny|/etc/hosts.allow)
because xinetd is compiled with libwrap

Code:

[root@host ~]# ldd /usr/sbin/xinetd | grep wrap
        libwrap.so.0 => /usr/lib/libwrap.so.0 (0x0076c000)

manusys · 11-23-2009, 07:13 AM

Hi,

Thanks for the solution. But i know the "only_from" directive. The scenario is like; i have configured TFTP server for backing up config files of switches for this i have script. We have arnd 300 switches.

What i want to do is i have to restrict tftp access & want only few people to access it & copy those config files back from tftp server.

Please suggest..!

Thanks...

centosboy · 11-23-2009, 10:07 AM

Quote:

Originally Posted by manusys

Hi,

Thanks for the solution. But i know the "only_from" directive. The scenario is like; i have configured TFTP server for backing up config files of switches for this i have script. We have arnd 300 switches.

What i want to do is i have to restrict tftp access & want only few people to access it & copy those config files back from tftp server.

Please suggest..!

Thanks...

well as tftp does not use authentication, then restriction by ip would be best using either of the suggested methods.
if this is not good, then i suggest ftp method which would work in a similar way except the user

ass would be in the url/path