> This is when a firewall appliance with an authentication function > comes in handy, e.g. Netscreen. You can authenticate yourself first > via a web login, after which the firewall opens up the SSH port for > you. > > Btw, what options are available to emulate this kind of setup? I'm > sure there's lots of ways, I just haven't looked around a lot yet.
http://freshmeat.net/projects/ssl-explorer >From the webpage: "The 3SP SSL-Explorer is an SSL VPN solution that provides users with WebDAV file access, intranet Web site proxying, Active Directory authentication, and Java application deployment using a standard Web browser." I really love this software. No more different binaries and configs for a vpn client for different OS. All you need is a browser with java. Once you are in, you can access ssh on your private network via ssh tunnels. For security attacks, it can be configured to: * Temporary lock the account if it failed (mine is set to 2) for 300 seconds. * disable the account if login password was incorrect 6 times. (mine is set to 3) regards, Andre _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
