Security Basics mailing list archives

Re: ssh login protection


From: Andreas Schubert <andreas.schubert () mathema de>
Date: Tue, 02 Dec 2003 18:06:40 +0100 (CET)

If you are thinking about security, just allow non-root rsa or dsa key
authentication with a password protected key. You can then allow all IPs to
connect to your mail servers and be quite secure (nothing is REALLY secure ;-)
that only you can access the servers, as someone would need the key AND the
knowledge of the password of it. And then he would also need the knowledge of
the root password to do real damage.

Just my 2 cents,

Cheers,

Andreas



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: