From owner-freebsd-stable Mon May 14 23:15: 3 2001 Delivered-To: freebsd-stable@freebsd.org Received: from mail2.uniserve.com (mail2.uniserve.com [204.244.156.10]) by hub.freebsd.org (Postfix) with ESMTP id 9EA8737B42C for ; Mon, 14 May 2001 23:14:55 -0700 (PDT) (envelope-from tom@uniserve.com) Received: from mail2.uniserve.com ([204.244.156.10]) by mail2.uniserve.com with esmtp (Exim 3.13 #1) id 14zY5t-000KJ5-00; Mon, 14 May 2001 23:14:05 -0700 Date: Mon, 14 May 2001 23:14:05 -0700 (PDT) From: Tom X-Sender: tom@athena.uniserve.ca To: Alfred Perlstein Cc: Doug Hardie , Jason DiCioccio , Nick Barnes , stable@FreeBSD.ORG Subject: Re: serial console In-Reply-To: <20010514230628.N2009@fw.wintelcom.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 14 May 2001, Alfred Perlstein wrote: > * Tom [010514 23:02] wrote: > > > > On Mon, 14 May 2001, Doug Hardie wrote: > > > > > How are you preventing unauthorized access via the PM2? I haven't > > > found any way to prevent it. > > > > What do you mean? First of all, you assign a password to the account > > used for serial port access. Then you assign filters on the ethernet > > interface to prevent telnet access from anything but known hosts. Then > > you do the same thing on your gateway router. > > Uh.. > > Still using telnet over the wild world of the net? > > Here's what I do, i use a crossover to a stable barely used machine > and a serial connection as a backup from another machine. Another > option is using a modem to dial in directly into the thing. It is all the PM2e supports. So if that is what you are using, you need to use telnet. Besides a console server should never really be on the Internet anyway. In fact, using dial-up access only (PM2e supports dial-back for excellent dial security) is probably the way to go. > -- > -Alfred Perlstein - [alfred@freebsd.org] > Daemon News Magazine in your snail-mail! http://magazine.daemonnews.org/ > Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message