From owner-freebsd-questions@FreeBSD.ORG Fri Aug 11 07:07:08 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 512F016A4DA for ; Fri, 11 Aug 2006 07:07:08 +0000 (UTC) (envelope-from zope@2012.vi) Received: from efit.xs4all.nl (efit.xs4all.nl [82.92.236.145]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8DD3643D45 for ; Fri, 11 Aug 2006 07:07:06 +0000 (GMT) (envelope-from zope@2012.vi) Received: from [192.168.0.6] (dpc67143135132.direcpc.com [67.143.135.132]) by efit.xs4all.nl (Weasel v1.73); 11 Aug 2006 09:03:37 Message-ID: <44DC2C8F.3020002@2012.vi> Date: Fri, 11 Aug 2006 03:06:55 -0400 From: beno User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) MIME-Version: 1.0 To: Olivier Nicole , freebsd-questions@freebsd.org References: <44DB7888.6080807@2012.vi> <200608110202.k7B22Er7052574@banyan.cs.ait.ac.th> In-Reply-To: <200608110202.k7B22Er7052574@banyan.cs.ait.ac.th> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: Re: Finding IP Addresses (OT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Aug 2006 07:07:08 -0000 Olivier Nicole wrote: > I'd advise you not to filter SSH by IP, that would be the best way to > lock you out of your server. > I did that once :) No fun! But I'll be much more careful this time! > Even if you find all the IP used by your ISP, you cannot predict when > the IP range will change, and it DOES change. > Hmmm. Worst-case scenario, the server farm would have access. Thinking... > If you limit the IP that can SSH to your server, you will not be able > to login when you are traveling and some urgent administration task > need to be performed. And the most urgent tasks must often be > performed when traveling... > I *never* travel! I live in paradise, my needs are minimal and satisfied, and I have no reason to travel :) > Set a strong password to your account (8+ characters, using letters up > and lower case, numbers and punctuation signs), do not allow SSH to > root account, enforce using sudo instead of su. > Never heard of sudo before. Looking it over, I don't understand how that would be beneficial in my case, since I'm the only one who really does anything on the machine. I could and should set it up for those occasions when I have others go in, however. Comments? TIA, beno