[xfbb] Password questions

[Marco Calistri]

Hello listmembers,
I'm getting stuck to find a solution that could grant me both
access security and easy forwardings.

Until today I used my XFBB without paying too much attention to CON_FILT.PSW
and I configured it as "Read-only","MD2","CALL","FLAG=0" also for my own
callsign:

!IK5BCU-8>
2 0
IK5BCU 0

This allows anyone using my call to access my system with sysop privileges,
and I won't it happens.

Having configured a local telnet forward on same XFBB's machine with JNOS,
I have the problem that if I change the CON_FILT.PSW rules on this way:

!IK5BCU-8>
2 0
IK5BCU 1 <password>

then I can't get connection since JNOS (seems) doesn't recognizes the MD2
string.

Some questions:

1)"Why have I to repeat MD2 style password during TELNET ACCESS if I've already
  input it on clear ?"

2)"Have I to write my own password into /etc/ax25/fbb/passwd.sys ?"

3)"What solutions exist to avoid risk of intrusion and allow telnet
  forwardings?"

TIA!

P.S.:If you feel this topic is OT or too much "newbie",
please reply me privately or point me to some docs. and How-To.

-- 
Regards,: Marco Calistri <ik5bcu@linux.ik5bcu.ampr.org> 
AMPRNET: ik5bcu@leogate.kf9ug.ampr.org
gpg key available on http://www.qsl.net/ik5bcu
Red Hat Linux release 7.1 (Seawolf) kernel 2.4.3-12
Uptime   8:22pm  up 43 min,  2 users,  load average: 0.00, 0.00, 0.02