[PATCH] telnetd max active sessions
Roberto A. Foglietta
roberto.foglietta at gmail.com
Thu Nov 29 00:28:05 PST 2007
2007/11/28, Denys Vlasenko <vda.linux at googlemail.com>:
> On Tuesday 27 November 2007 05:30, Roberto A. Foglietta wrote:
> > Hi,
> >
> > in order to limit the max number of telnetd accpeted sessions apply this
> > patch.
>
> Instead of adding this to each networking applet, I propose using
> inetd's connection limiting, or use this applet + telnetd in inetd mode:
>
I cannot use inetd or perhaps not everywhere. Unlimited sessions
could allow a password cracking brute force attack on embedded system.
That is the reason because I decided to develop this patch. I just
upgraded from 1.0.1 to 1.2.2.1 but in this phase I cannot propose
further versions. I need to use legacy version because after
deployment system firmware would not be upgradeable for a long time.
> Re patch:
[cut]
> Not needed - you are exiting anyway.
Thanks,
--
/roberto
More information about the busybox
mailing list