Re: openssh

On Fri, 6 Dec 2002, Daniel Roethlisberger wrote:

> ahem.. what the heck is wrong with setting up netfilter to drop outgoing
> ssh traffic on those ifaces? that's a matter of issueing a small number
> of iptables commands. why don't you do it the easy way? (locking down
> the system does make sense sometimes, but not merely to stop users from
> ssh'ing through certain ifaces.
>
> cheers
> dan (puzzled, I dare say)

nothing is wrong with iptables, that is why I use them, but I am araid
that they are not enough.

ssh'ing to a special interface speeds up the connection, cause they can
build tunnel which will go in from eth1 and go out to eth0.

  H
CUH Rainer Peter Feller
  H

-- 
Unsubscribe: send email to [email protected]
and put 'unsubscribe lfs-security' in the subject header of the message