From owner-freebsd-questions@FreeBSD.ORG Wed May 7 13:17:47 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4D19D37B407 for ; Wed, 7 May 2003 13:17:45 -0700 (PDT) Received: from smtp.ii.uib.no (eik.ii.uib.no [129.177.16.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id B915743F75 for ; Wed, 7 May 2003 13:17:41 -0700 (PDT) (envelope-from s1465@lstud.ii.uib.no) Received: from havengel.ii.uib.no ([129.177.122.5]) by smtp.ii.uib.no with esmtp (Exim 4.12) id 19DVMA-0002f9-00; Wed, 07 May 2003 22:17:38 +0200 Received: (from s1465@localhost) by havengel.ii.uib.no (8.11.6/8.11.6) id h47KHcb17739; Wed, 7 May 2003 22:17:38 +0200 Date: Wed, 7 May 2003 22:17:38 +0200 (CEST) From: =?ISO-8859-1?Q?Sondre_R=F8njom?= To: Daniela In-Reply-To: <200305072159.14539.dgw@liwest.at> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: -24.6 (------------------------) X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *19DVMA-0002f9-00*0oXnfeLGUZ6* cc: questions@freebsd.org Subject: Re: Why is port 22 open by default? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 May 2003 20:17:47 -0000 On Wed, 7 May 2003, Daniela wrote: > I was just wondering: > Is SSH really so secure that it can be on by default? > > I'm really paranoid, and I could sleep better if the answer was yes :-) > > Regards, > Daniela Well, I guess that pretty much depends on how you define "so secure". If that means 100% secure, then you have a problem. Defining how difficult it is to break SSH also depends largly on you knowledge of computer networking, especially cryptography and how SSH is implemented in FreeBSD. I guess you should do a google search for all of this(Bruce Schneier has a relatively good book on Cryptography and Hill on Coding Theory) but for remote control of your computer I would prefer keeping port 22 and SSH /sondre