Date: Wed, 14 Nov 2001 22:44:17 -0500 (EST) From: Chris BeHanna <behanna@zbzoom.net> To: <freebsd-security@freebsd.org> Subject: Re: AdoreWorm Message-ID: <20011114224255.C57801-100000@topperwein.dyndns.org> In-Reply-To: <5.1.0.14.2.20011114215959.01e4bd90@MailServer>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 14 Nov 2001, Stefan Probst wrote:
> Hello Chris,
>
> At 09:58 14.11.2001 -0500, you wrote:
> -------------------------
> >There is no reason I can think of to use
> >it [telnetd] on any modern server, because ssh clients are widely and freely
> >available for every platform.
>
> I will give you some reasons:
> 1. Until a few weeks ago, Vietnam was behind a nation-wide firewall, which
> didn't let ssh pass. I had no choice than to do everything via telnetd.
It is possible to tunnel just about anything through a firewall if
you're determined enough.
> But, just to clarify: On all my machines, root has neither telnet, nor ftp
> access. And I am not on a cable modem (where the whole neighbourhood can
> sniff packets), but dial-up to the ISP, and from there comparable direct
> lines to the server in the US. "Only" provider staff should have access to
> the lines, i.e. be able to sniff.
How many hops between your ISP and the machine? Even if the
answer is "1", you are still vulnerable to such things as dsniff.
--
Chris BeHanna
Software Engineer (Remove "bogus" before responding.)
behanna@bogus.zbzoom.net
I was raised by a pack of wild corn dogs.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011114224255.C57801-100000>