Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Aug 1997 22:15:46 +1000
From:      "Andrew Foster" <adflists@fl.net.au>
To:        "Daniel O'Callaghan" <danny@panda.hilink.com.au>
Cc:        <isp@freebsd.org>
Subject:   Re: Remote Administration
Message-ID:  <199708221216.WAA22463@delenn.fl.net.au>

next in thread | raw e-mail | index | archive | help
 >> >  I am setting up an ISP server running FreeBSD and would like to deny
all
>> > shell access to my server but keep myself a way to get into the server
for
>> > remote administration. Any ideas on the best way to accomplish this?
>> Two ways.. either attach a modem to the box itself and dial-in to the
>> server, or (using tcp/ip_wrappers) only allow access from certain boxes,
>> ie your desktop.
>
>You should also consider installing ipfw into your kernel, and blocking
>access to port 22 (ssh) from untrusted places.

ssh can also use hosts.deny/hosts.allow for access as well.

Regards,
Andrew Foster






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199708221216.WAA22463>