Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Aug 1997 09:20:34 +1000 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Mark Segal <mark@club-web.com>
Cc:        isp@FreeBSD.ORG
Subject:   Re: Remote Administration
Message-ID:  <Pine.BSF.3.91.970822090615.308G-100000@panda.hilink.com.au>
In-Reply-To: <33FC61C0.A5F0F798@club-web.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Thu, 21 Aug 1997, Mark Segal wrote:

> John Brown wrote:
> > 
> >  I am setting up an ISP server running FreeBSD and would like to deny all
> > shell access to my server but keep myself a way to get into the server for
> > remote administration. Any ideas on the best way to accomplish this?
> Two ways.. either attach a modem to the box itself and dial-in to the
> server, or (using tcp/ip_wrappers) only allow access from certain boxes,
> ie your desktop.

You should also consider installing ipfw into your kernel, and blocking 
access to port 22 (ssh) from untrusted places.

Danny



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970822090615.308G-100000>