Re: Security - Use of PasswordAuthentication by ltsp clients.

On Wed, Aug 27, 2008 at 10:20:29AM -0400, Warren Togami wrote:

> And I disagree with Scott's reply regarding building a separate hardware 
> firewall.  If you lock down all incoming ports on your eth1 side with 
> iptables and allow only ssh key authentication for the eth1 instance of 
> sshd, then you are in pretty good shape.

Sure, but now, when you have connection problems on the LTSP box, you have to
ask yourself: is it the iptables rules, or something else.  All I'm saying is,
the more stuff you pile on ONE machine, the more complicated it gets to debug
problems when they do (and they ALWAYS do) occur.  For the nominal added
expense of an old box, and a bit more networking hardware, you can isolate that
function on a separate box, and simplify things a bit.

But, you're right it CAN be done all on one box.  So, it's all good.

Cheers,
Scott

-- 
Scott L. Balneaves | "There are many causes I am prepared to die for,
Systems Department |  but no causes I am prepared to kill for."
Legal Aid Manitoba |    -- Mohandas Karamchand Gandhi

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_____________________________________________________________________
Ltsp-developer mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-developer
For additional LTSP help,   try #ltsp channel on irc.freenode.net