On Thu, 2003-08-21 at 11:55, Chris Ricker wrote:
On Thu, 21 Aug 2003, Pekka Savola wrote:
> On Thu, 21 Aug 2003, Chris Ricker wrote:
> > > I'm not sure you are disagreeing with me here. Are you saying
don't
> > > remote log in to a firewall at all, or are you agreeing with me?
> >
> > I'm disagreeing. The last thing a fw should do is run a service, let
> > alone one with the security history of ssh.... Manage over serial.
>
> Disagree. Set your access controls in /etc/hosts.allow for sshd and you're
> done :-)
and then join the OpenSSL / OpenSSH exploit train.... No, thanks!
This is all just proving my point, which was that no one can even agree
on what a minimal machine should be.
Actually, at this point this part of the thread is a security
discussion, not a minimum install discussion.
--
Bill Anderson
RHCE #807302597505773
bill(a)noreboots.com