Joon Guillen said:
> On Tue, 2002-12-17 at 12:43, Orlando Andico wrote:
>
> That's what I always do.  However, sometimes I wish I could establish
> an ssh session from home (for emergencies).  At home, I have a
> "personal" DSL connection, so IP add keeps changing.  Anyone come up
> with a secure solution short of allowing (thru iptables and
> tcp_wrappers) the range of IP addresses the ISP provides?

maybe implement something like a POP3S before SMTP thing? this time it will
be called a POP3S (or IMAPS) before SSH. but then creating such a thing
(and the daemon process to accompany it) can open another can of worms...
another alternative would be to move the SSH port to some other number. at
least if there's some script kiddie trying to portscan your box and try out
ssh vulnerabilities, they would miss the bogus SSH port. security through
obscurity can sometimes be good too :)

-dre



_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to