unclug AT lists.ibiblio.org
Subject: UNC Linux Users Group
List archive
- From: Scott Zentz <zentz AT email.unc.edu>
- To: UNC Linux Users Group <unclug AT lists.ibiblio.org>
- Subject: Re: [unclug] ssh via wireless...
- Date: Wed, 27 Feb 2008 17:10:29 -0500
IMHO opening ssh to the world is a bad idea... SSH is encrypted and
uses authentication but if you open up your attack vector to the world
then you would be susceptible to any 0 day exploit that applies to ssh
(known and unknown)... Not to mention the constant dictionary based
attacks that script kiddies use on a daily basis... 99.999 percent of
the dictionary based attacks don't work and just create more traffic on
the network but it's still an attack and eventually someone will get
in... -scz Andrew Perrin wrote: Pine.LNX.4.64.0802271641470.31122 AT perrin.socsci.unc.edu" type="cite">Why use hosts.allow? If it's only ssh accessible it should be safe to open up and just require authentication. Alternatively, if you want people to be able to ssh in from all wireless UNC addresses, use .wireless.unc.edu Again, because it's ssh, they'll still have to authenticate once they connect. ---------------------------------------------------------------------- Andrew J Perrin - andrew_perrin (at) unc.edu - http://perrin.socsci.unc.edu Associate Professor of Sociology; Book Review Editor, _Social Forces_ University of North Carolina - CB#3210, Chapel Hill, NC 27599-3210 USA On Wed, 27 Feb 2008, dsandif wrote:Question: I have a linux project server that I have set too be accessible only by SSH. It is static IP'ed so if anyone wants to get access within the department subnet, I have to add their IP to the hosts.allow file. However, I also want wireless users to be able to access the project server files as well and being that the wireless network is dhcp, I'm not sure as to how to go about this. If I try to access the server via wireless, I do get a contact registered from both the host and the client but then I get a "ssh_exchange_identification: Connection closed by remote host" on the client and on the server security logs, it comes up as a dhcp wireless client denied. Is there a way to do this so that folks that use wireless in my building can get access?, thxs. D- _______________________________________________ unclug mailing list unclug AT lists.ibiblio.org http://lists.ibiblio.org/mailman/listinfo/unclug_______________________________________________ unclug mailing list unclug AT lists.ibiblio.org http://lists.ibiblio.org/mailman/listinfo/unclug |
-
[unclug] ssh via wireless...,
dsandif, 02/27/2008
- Re: [unclug] ssh via wireless..., Scott Zentz, 02/27/2008
-
Re: [unclug] ssh via wireless...,
Andrew Perrin, 02/27/2008
- Re: [unclug] ssh via wireless..., dsandif, 02/27/2008
-
Re: [unclug] ssh via wireless...,
Brian Payst, 02/27/2008
- Re: [unclug] ssh via wireless..., Cristóbal Palmer, 02/28/2008
-
Re: [unclug] ssh via wireless...,
dsandif, 02/28/2008
-
Re: [unclug] ssh via wireless...,
Scott Zentz, 02/28/2008
- Re: [unclug] ssh via wireless..., Greg Jansen, 02/28/2008
-
Re: [unclug] ssh via wireless...,
Scott Zentz, 02/28/2008
-
Re: [unclug] ssh via wireless...,
Scott Zentz, 02/27/2008
-
Re: [unclug] ssh via wireless...,
Cristóbal Palmer, 02/28/2008
- Re: [unclug] ssh via wireless..., Gary Bishop, 02/28/2008
- Re: [unclug] ssh via wireless..., dsandif, 02/28/2008
- Re: [unclug] ssh via wireless..., hays, 02/29/2008
-
Re: [unclug] ssh via wireless...,
Cristóbal Palmer, 02/28/2008
- Re: [unclug] ssh via wireless..., Cristóbal Palmer, 02/27/2008
Archive powered by MHonArc 2.6.24.