[NTLUG:Discuss] a little brain picking, if you please...

[Tom McDonald]

On Thu, 30 Aug 2001 19:46:57 -0500
Fred James <fredjame at concentric.net> wrote:

> Any further clarification?
> 
> Tom McDonald wrote:
> 
> > On Thu, 30 Aug 2001 17:43:09 -0500
> > Fred James <fredjame at concentric.net> wrote:
> > 
> > 
> >>The set up
> >>Several flavors of *nix servers
> >>  - SGI IRIX (6.3 through 6.5.x)
> >>  - Unisys UNIX SVR4 1.4
> >>  - Linux (Red Hat 5.2 through 7.1
> >>Several flavors of remote clients
> >>  - Windows 95, 98, NT, 2000
> >>  - Linux (Red Hat 6.2 through 7.1)
> >>Several modes of connections
> >>  - IP via ISP
> >>  - - ISDN
> >>  - - Cable modem
> >>  - - DSL
> >>  - - Wireless modem
> >>  - - Land dial up
> >>
> >>The question
> >>SSH, or TCP Wrappers, or both?
> >>
> >>Anyone care to give an overview of any or all? - a comparison? - pros?
-
> >>
> > 
> >>cons? - opinions, or gut feelings?  All would be welcome.
> >>
> >>Thanks in advance.
> >>
> >>-- 
> >>...make every program a filter...
> >>
> >>_______________________________________________
> >>http://www.ntlug.org/mailman/listinfo/discuss
> >>
> > 
> > 
> > Both, with maybe ipsec thrown in for good measure..
> > 

James,

IPSEC should be available for all platforms and will help to prevent the
man in the middle type attacks.  It makes for a more secure VPN.  (Check
out http://www.freeswan.org)   Use SSH for all remote access to the
machines, and run all services with TCP wrappers. You will get several
layers of security and have much finer control of who gets in and how.


Tom 


-- 
Tom McDonald    <tom at compuclaim.com>

The more things change, the more they stay insane.