On Thu, 2003-08-21 at 11:55, Chris Ricker wrote:
On Thu, 21 Aug 2003, Pekka Savola wrote:
On Thu, 21 Aug 2003, Chris Ricker wrote:
I'm not sure you are disagreeing with me here. Are you saying don't remote log in to a firewall at all, or are you agreeing with me?
I'm disagreeing. The last thing a fw should do is run a service, let alone one with the security history of ssh.... Manage over serial.
Disagree. Set your access controls in /etc/hosts.allow for sshd and you're done :-)
and then join the OpenSSL / OpenSSH exploit train.... No, thanks!
This is all just proving my point, which was that no one can even agree on what a minimal machine should be.
Actually, at this point this part of the thread is a security discussion, not a minimum install discussion.