Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Aug 1997 09:20:34 +1000 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Mark Segal <mark@club-web.com>
Cc:        isp@FreeBSD.ORG
Subject:   Re: Remote Administration
Message-ID:  <Pine.BSF.3.91.970822090615.308G-100000@panda.hilink.com.au>
In-Reply-To: <33FC61C0.A5F0F798@club-web.com>

index | next in thread | previous in thread | raw e-mail

On Thu, 21 Aug 1997, Mark Segal wrote:

> John Brown wrote:
> > 
> >  I am setting up an ISP server running FreeBSD and would like to deny all
> > shell access to my server but keep myself a way to get into the server for
> > remote administration. Any ideas on the best way to accomplish this?
> Two ways.. either attach a modem to the box itself and dial-in to the
> server, or (using tcp/ip_wrappers) only allow access from certain boxes,
> ie your desktop.

You should also consider installing ipfw into your kernel, and blocking 
access to port 22 (ssh) from untrusted places.

Danny


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970822090615.308G-100000>