On Thu, 2008-10-16 at 10:58 +0100, Gavin McCullagh wrote:
> Hi,
> 
> On Thu, 16 Oct 2008, jam wrote:
> 
> > Security through complexity is dumb and ends up biting you:
> 
> Security by obscurity will probably work against brute force ssh worms, but
> is less likely to work where there is a determined attack. 
> 
> > My server is on a 192.168. From the WORLD it is only available via a non 
> > standard port, internally 22 and ltsp is bog standard.
> 
> A portscan and telnet to each open port will quickly reveal your open sshd
> to someone who actually wants to get into _your_ system.  Perhaps that will
> never happen to you?  Fair enough then.
You are right, of course. Thanks for the nudge. Nobody needs to access
out classroom network from outside except me, and I use a secure tunnel
(OpenVPN) for that purpose. The router was configured to forward a high
port to port 22 on the server to help with initial configuration, but
that isn't necessary any more, and I've inactivated it. 

Don't need no stinking open ports!

> 
> Gavin
> 
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _____________________________________________________________________
> Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
>       https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> For additional LTSP help,   try #ltsp channel on irc.freenode.net


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to