15.01.2013 14:48, Frank Staals:
Volodymyr Kostyrko <c.kw...@gmail.com> writes:

<snip>
In FreeBSD there are two ways of enabling sshd: default, fast and easy through
rc.conf and a bit tricky and secure via inetd.conf. Everyone can select their
own poison. I personally prefer the latter one.

You seem to imply that enabling sshd through inetd is more secure than
directly through rc.conf. Care to elaborate on that?

* there's no central process to target with attacks;
* SSHv1 server key is regenerated every time new connection is created;
* with inetd you can force max connections per minute rate or max connections per ip.

--
Sphinx of black quartz, judge my vow.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to