Re: security for a home system

2007-04-25 Thread Douglas Allan Tutty
On Wed, Apr 25, 2007 at 10:30:33AM -0400, Greg Folkert wrote: > On Wed, 2007-04-25 at 00:45 -0700, Paul Johnson wrote: > > Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to > > gmane.linux.debian.user: > > > > > > rsync uses ssh as the transport layer, similar to scp. > > > > Int

Re: security for a home system

2007-04-25 Thread Greg Folkert
On Wed, 2007-04-25 at 00:45 -0700, Paul Johnson wrote: > Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to > gmane.linux.debian.user: > > > > > rsync uses ssh as the transport layer, similar to scp. > > Interesting. I did not know that... for some reason, I thought it was in >

Re: security for a home system

2007-04-25 Thread Paul Johnson
Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to gmane.linux.debian.user: > On Tue, Apr 24, 2007 at 03:16:47AM -0700, Paul Johnson wrote: >> Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted >> to gmane.linux.debian.user: >> > >> It never hurts to have a border r

Re: security for a home system

2007-04-24 Thread Douglas Allan Tutty
On Tue, Apr 24, 2007 at 03:16:47AM -0700, Paul Johnson wrote: > Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to > gmane.linux.debian.user: > > It never hurts to have a border router between your network and the > Internet, with only the ports you intend to use forwarded to the

Re: security for a home system

2007-04-24 Thread Paul Johnson
Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to gmane.linux.debian.user: > On Mon, Apr 23, 2007 at 01:23:00AM -0700, Paul Johnson wrote: >> Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> >> posted to gmane.linux.debian.user: >> >> > If I have two boxes, with two users

Re: security for a home system

2007-04-23 Thread Greg Folkert
On Mon, 2007-04-23 at 09:30 -0400, Douglas Allan Tutty wrote: > On Mon, Apr 23, 2007 at 01:23:00AM -0700, Paul Johnson wrote: > > Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted > > to gmane.linux.debian.user: > > > > > If I have two boxes, with two users, linked by ethernet and on

Re: security for a home system

2007-04-23 Thread Joe Hart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Johnson wrote: [snip] >> I would think that anyone hacking into my system would face a login >> prompt, but who knows? I'm not running a ssh daemon, so it I don't see >> what would give them such prompt, and my firewall should block anyone >> att

Re: security for a home system

2007-04-23 Thread Douglas Allan Tutty
On Mon, Apr 23, 2007 at 01:23:00AM -0700, Paul Johnson wrote: > Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted > to gmane.linux.debian.user: > > > If I have two boxes, with two users, linked by ethernet and one box is > > on dial-up to the ISP, with nothing listening on external p

Re: security for a home system

2007-04-23 Thread Paul Johnson
Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to gmane.linux.debian.user: > On Sat, Apr 21, 2007 at 09:14:27PM +0200, Joe Hart wrote: >> Douglas Allan Tutty wrote: >> > Reflecting on recent posts re allowing root login (related, but I >> > didn't want to steal the thread), I'm wo

Re: security for a home system

2007-04-23 Thread Paul Johnson
Douglas Allan Tutty wrote in Article <[EMAIL PROTECTED]> posted to gmane.linux.debian.user: > If I have two boxes, with two users, linked by ethernet and one box is > on dial-up to the ISP, with nothing listening on external ports except > the ntp daemon, what is a reasonable stance on security?

Re: security for a home system

2007-04-23 Thread Paul Johnson
Joe Hart wrote in Article <[EMAIL PROTECTED]> posted to gmane.linux.debian.user: > Douglas Allan Tutty wrote: >> On Sat, Apr 21, 2007 at 09:14:27PM +0200, Joe Hart wrote: >>> Douglas Allan Tutty wrote: If I need to run a backup, other than it being 'proper', why not just login as root i

Re: security for a home system

2007-04-22 Thread Joe Hart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greg Folkert wrote: > On Sat, 2007-04-21 at 21:55 +0200, Joe Hart wrote: >> Perhaps one of the gurus in this field will take the opportunity to >> explain why having a root console open all the time is a bad thing >> (other than the obvious local acces

Re: security for a home system

2007-04-21 Thread Greg Folkert
On Sat, 2007-04-21 at 21:55 +0200, Joe Hart wrote: > Perhaps one of the gurus in this field will take the opportunity to > explain why having a root console open all the time is a bad thing > (other than the obvious local accessibility). My backups take a while, > that's why I do it. To address t

Re: security for a home system

2007-04-21 Thread Joe Hart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Douglas Allan Tutty wrote: > On Sat, Apr 21, 2007 at 09:14:27PM +0200, Joe Hart wrote: >> Douglas Allan Tutty wrote: >>> Reflecting on recent posts re allowing root login (related, but I didn't >>> want to steal the thread), I'm wondering about a home

Re: security for a home system

2007-04-21 Thread Douglas Allan Tutty
On Sat, Apr 21, 2007 at 09:14:27PM +0200, Joe Hart wrote: > Douglas Allan Tutty wrote: > > Reflecting on recent posts re allowing root login (related, but I didn't > > want to steal the thread), I'm wondering about a home network and what > > to bother with. There's a touch of devil's advocate in

Re: security for a home system

2007-04-21 Thread Joe Hart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Douglas Allan Tutty wrote: > Reflecting on recent posts re allowing root login (related, but I didn't > want to steal the thread), I'm wondering about a home network and what > to bother with. There's a touch of devil's advocate in this but the > conc

security for a home system

2007-04-21 Thread Douglas Allan Tutty
Reflecting on recent posts re allowing root login (related, but I didn't want to steal the thread), I'm wondering about a home network and what to bother with. There's a touch of devil's advocate in this but the concept that physical access == root access causes one to wonder. If I have two boxes