Re: MAC-based ssh

2003-05-02 Thread Peter Ondraska


On Fri, 2 May 2003, Phillip Hofmeister wrote:

> On Fri, 02 May 2003 at 12:26:04PM +0200, Hans van Leeuwen wrote:
> > I have decided to do this thrue SSH by putting the client key in 
> > authorized_keys2. But this seems a little risky, so I was wondering if 
> > it was possible to get sshd to only allow the client MAC-address.
> 
> SSHD cannot do what you are asking it to do, in fact I don't think there
> are many TCP/IP Applications that can.  The MAC address is WELL below
> the layer 5,6,7 that most internet applications reside in.
> 
Doesn't TCP/IP have only at most 4 layers?

Peter Ondraska

> Many applications can pick up layer 3 and 4 data (IP Address and port)
> but the layer 2 information (MAC) is usually only a concern for the O/S
> Kernel.
> 
> Some of the other options discussed in this thread might be a better
> solution.
> 
> -- 
> Phillip Hofmeister
> Network Administrator/Systems Engineer
> IP3 Inc.
> http://www.ip3security.com
> 
> PGP/GPG Key:
> http://www.zionlth.org/~plhofmei/
> wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import
> --
> Excuse #163: RPC_PMAP_FAILURE 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 



thanks for errorlists

2002-11-19 Thread Peter Ondraska
Thanks to all the guys who responded to my mail, and gave me the valuable 
URLs for my work. I got good info there.
Thanks.

Peter Ondraska



thanks for errorlists

2002-11-18 Thread Peter Ondraska
Thanks to all the guys who responded to my mail, and gave me the valuable 
URLs for my work. I got good info there.
Thanks.

Peter Ondraska


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




errorlists

2002-11-12 Thread Peter Ondraska
Hi

This may be quite offtopic and definitely not debian related.
I am just making a school work on security related bugs and programming 
errors. I would like to ask some of you to list me some error classes you 
know. I mean, a 'Buffer overflow' or 'Format string vulnerability' are 
classes because they appear in many programs and in variety of types.
I don't ask for high level categories, like 'Boundary condition error', 
but I won't dump them if you mention some:) But these depend on the 
chosen taxonomy/hierarchy.

All I ask are some tips and hints you can remember.

Thanks in advance.

Peter Ondraska



errorlists

2002-11-12 Thread Peter Ondraska
Hi

This may be quite offtopic and definitely not debian related.
I am just making a school work on security related bugs and programming 
errors. I would like to ask some of you to list me some error classes you 
know. I mean, a 'Buffer overflow' or 'Format string vulnerability' are 
classes because they appear in many programs and in variety of types.
I don't ask for high level categories, like 'Boundary condition error', 
but I won't dump them if you mention some:) But these depend on the 
chosen taxonomy/hierarchy.

All I ask are some tips and hints you can remember.

Thanks in advance.

Peter Ondraska


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]