Allow telnet to only one IP using host.deny or host.allow

[JB]

Jatin K <ssh.fedora <at> gmail.com> writes:

> 
> Dear All,
> 
> I want to allow telnet in my server from local LAN from only one IP 
> address, to fulfill the requirement  what should I do from the following
> 
> [1] add an entry in /etc/host.allow like following
> 
> telnetd : xx.xx.xx.xx
> 
> or
> 
> [2] add an entry in /etc/host.deny like following
> 
> telnet : ALL except xxx.xxx.xxx.xxx
> 
> [3] or simply create a iptables rule to allow telnet from desired IP
> 
> what is the best option to go through ???
> 

Hi,

Be careful.
1. man 5 hosts_access 
   ACCESS CONTROL FILES
   Read it multiple times :-)
2. Use iptables as well.

JB