Re: OpenSSH question

[Frank Knobbe <fknobbe () knobbeits com>]

On Fri, 2002-11-22 at 11:51, Skip Carter wrote:
> > trying to log snort alerts to a remote mysql db via openssh.  any ideas on
> > the configuration?
>
> To port foward on a port over ssh, use something like the following from the 
> IDS:
>
>  ssh -L XXXX:dbserver.mydomain.com:XXXX dbserver.mydomain.com
>
> where XXXX is the mysql port number.
>
> then on the IDS connect to the database at XXXX on localhost.
>
>
> The disadavantage of doing it this way is that it requires you to login via 
> ssh to the database server from
> the IDS.  A more practical approach is to use stunnel (http://www.stunnel.org/
> ) to provide the equiavlent
> without the ssh login session.  The stunnel docs provide all the details.


SSH will work fine if you use keys and no password authentication for
login. That can be automated quite nicely and improves security.
Configure the user account on the server so that you can not get a login
shell, only accept a port redirection.

Frank

Attachment: signature.asc
Description: This is a digitally signed message part