Re: deny non-tunnel'd services?

From: Richard E. Silverman (slade@shore.net)
Date: 04/26/02


From: slade@shore.net (Richard E. Silverman)
Date: 26 Apr 2002 02:33:13 -0400


> I'd shutdown the cvs server in inetd.
>
> Instead, I would use the following environment variables:
>
> setenv CVSROOT :ext:@10.0.0.2:/home/cvs
> setenv CVS_RSH /usr/openssh/bin/ssh
>
> where 10.0.0.2 is the IP address of machine at work with /home/cvs.

This will require a new SSH connection for every CVS operation, which can
be pretty slow depending on the machines in question...

-- 
  Richard Silverman
  slade@shore.net