TELNET SESSION OVER THE INTERNET

Yes, we do this all the time.

Client-->Linux Firewall-->Unix host

It is STRONGLY recommended, however, that you use secure shell (ssh) to make these connections as 'normal' telnet sessions are sent in plain-text and can be hacked.

The otherthing that you want to have in place is IP blocking to restrict the valid addresses that can access the unix host. Otherwise you're holding up a sign "Hit Me!"

The other thing to do is as we've done, i.e. have them log into a firewall first, before hitting the unix host directly. This puts another layer of "insulation" in place between the host and the outside world. Users on our system have a 3-part login process - 1) to the firewall (IP blocked), 2) to the unix host environment (IP blocked), 3)to the application environment.

Paranoia is healthy and we're healthy 'cause we're paranoid! Trust this gives a few helpful ideas.