From owner-freebsd-questions@FreeBSD.ORG  Wed May  7 13:33:13 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D399B37B401
	for <questions@freebsd.org>; Wed,  7 May 2003 13:33:13 -0700 (PDT)
Received: from lilzcluster.liwest.at (lilzclust01.liwest.at [212.33.55.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9C2A943FA3
	for <questions@freebsd.org>; Wed,  7 May 2003 13:33:10 -0700 (PDT)
	(envelope-from dgw@liwest.at)
Received: from cm58-27.liwest.at by lilzcluster.liwest.at
	(8.10.2/1.1.2.11/08Jun01-1123AM)
	id h47KX4o0001037802; Wed, 7 May 2003 22:33:05 +0200 (MEST)
From: Daniela <dgw@liwest.at>
To: Brad Lisoweski <brad.lisoweski@siemens.com>,
	questions@freebsd.org
Date: Wed, 7 May 2003 22:33:30 +0000
User-Agent: KMail/1.5.1
References: <60684F9727113D438523F4B5BD9207DE42F8F3@troll3.trangosoft.com>
In-Reply-To: <60684F9727113D438523F4B5BD9207DE42F8F3@troll3.trangosoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200305072233.30197.dgw@liwest.at>
Subject: Re: Why is port 22 open by default?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 May 2003 20:33:14 -0000

On Wednesday 07 May 2003 20:03, Brad Lisoweski wrote:
> Would you rather have telnet open?
>
> IMHO, SSH is secure, and is fine to be open by default.  If you are
> paranoid, compile ipfilter or ipfw into your kernel and block access to
> port 22.

Thanks for your reply.

I run a shell server, so I need SSH. 
I'm still relatively new to all this, so I figured if it is open by default, 
it must be secure.
Before I thought that easily exploitable holes are regularly discovered in 
SSH.

Daniela