Re: X Window over SSH
From: Matthew Collins (pingu@zymurgy.org)Date: 08/13/01
- Previous message: Matthew Collins: "Re: X Window over SSH"
- In reply to: nrosenb2@csc.com: "Re: X Window over SSH"
- Next in thread: Darren Moffat: "Re: X Window over SSH"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 13 Aug 2001 13:50:10 +0100 From: Matthew Collins <pingu@zymurgy.org> To: nrosenb2@csc.com Subject: Re: X Window over SSH Message-ID: <20010813135010.A96299@keg.zymurgy.org>
On Fri, Aug 10, 2001 at 11:45:43AM +0100, nrosenb2@csc.com wrote:
> Greg,
>
> You could run ipf (IP Filter) on the Sun box to do this without setting up
> a dedicated FW in front of the Sun box or like myself, use exceed over ssh
> on a windows box. In fact I run both but use exceed because you can render
> your unix desktop in a decent resolution without a performace hit
> (Windowmaker & enlightenment need good resolutions). The latter (exceed
> solution) is much easier to setup however you need to use windows ** DUCK
> ** ;-) (I have written a mini-howto that I could forward on if you want).
> You can get more information on ip filter at
> http://coombs.anu.edu.au/~avalon/
>
A couple of things...
1) (Nick) WindowMaker prior top 0.65.1 has a buffer overflow so you probably
want to upgrade if you're concerned about security.
2) Dont rely on your sshd server side config file! If your host does not have
a strict firewall between it and the area you are concerned about there is ntohing
to stop a user running sshd on a non standard port and pulling X11 apps over
that way.
A decent ipf ruleset or firewall are pretty much required if you're concerned
about this and have multi-user access to the system.
Matt
- Previous message: Matthew Collins: "Re: X Window over SSH"
- In reply to: nrosenb2@csc.com: "Re: X Window over SSH"
- Next in thread: Darren Moffat: "Re: X Window over SSH"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
