Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Aug 1997 09:45:12 -0700 (PDT)
From:      "Eric J. Schwertfeger" <ejs@bfd.com>
To:        Stefan Molnar <stefan@exis.net>
Cc:        John Brown <jbrown@vafibre.com>, freebsd-isp@FreeBSD.ORG
Subject:   Re: Remote Administration
Message-ID:  <Pine.BSF.3.95.970821094232.10149A-100000@harlie.bfd.com>
In-Reply-To: <Pine.LNX.3.95.970821113854.30636A-100000@sailfish.exis.net>

next in thread | previous in thread | raw e-mail | index | archive | help


On Thu, 21 Aug 1997, Stefan Molnar wrote:

> 
> >  I am setting up an ISP server running FreeBSD and would like to deny all
> > shell access to my server but keep myself a way to get into the server for
> > remote administration. Any ideas on the best way to accomplish this?
> 
> You could make a special port ready that will give a login besides the
> standard telnet port.  So when you want to get in just 
> telnet hostname 9452  But if someone strobes the system then it would be
> found.  Also you can setup your machine to only accect telnets from a 
> set of hosts and use another machine of yours to login from.

Actually, I'd suggest installing ssh, and I *THINK* you can disable all
telnet and rcmd stuff, and ssh has pretty good access control.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.970821094232.10149A-100000>