Hello all,
I am in a situation, where I have a network admin, who has setup VPN access to our network, using IPSec.
Now, all I want to be able to do, is use simple ssh, and if need be, tunnel a few protocols over it.
I have done some reading up on ssh and IPSec, and see no security risk, in using ssh for what I want to do. But the network admin, just does not want to open up the ssh port.
I can even try and suggest that he only open the firewall to my fixed IP address, and use keys rather than passwords, for ssh login auth, but other than password cracking, I am sure that simple ssh access, should not be a very serious security risk.
Anyway, can someone please comment on this ? I am still trying to find a good article which discusses this issue.
Thanks Shahed
From: "Shahed Moolji" shahed@enoor.com
Hello all,
I am in a situation, where I have a network admin, who has setup VPN access to our network, using IPSec.
Now, all I want to be able to do, is use simple ssh, and if need be, tunnel a few protocols over it.
I have done some reading up on ssh and IPSec, and see no security risk, in using ssh for what I want to do. But the network admin, just does not want to open up the ssh port.
I can even try and suggest that he only open the firewall to my fixed IP address, and use keys rather than passwords, for ssh login auth, but other than password cracking, I am sure that simple ssh access, should not be a very serious security risk.
Anyway, can someone please comment on this ? I am still trying to find a good article which discusses this issue.
Thanks Shahed
Opening up the ssh port isnt a big security risk. But be sure to keep your SSH server/client updated as they are a very good point of attack for a cracker.
Regards, Dinesh.
_________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Opening up the ssh port isnt a big security risk. But be sure to keep your SSH server/client updated as they are a very good point of attack for a cracker.
True. If you are paranoid, you can try setting up port knocking or similar schemes that operate over HTTPS to close and open SSH port whenever required.
Regards,
ah