> It wouldn't be hard to write a little program to listen on the appropriate
> port and do the deed. Perl could be used to do so quiet easily.
>
> Some questions however,
>
> How is the shutdown secured ?
>
> Is the shutdown message signed or encrypted somehow ?
>
> This kind of service could potentially provide for one hell of a DOS
> attack.
You could sign cryptographically sign the request. It should not be too hard
to do that by using perl around command line version of PGP. You'd have to
ensure that the server with the private key is not compromised though, as it
would cause potential DOS. And of course the signed message would have to
include a timestamp to prevent replay attacks.
Cheers,
Dave.
--
David Zverina
Alt Key Pty. Ltd.
http://www.altkey.com
PO Box 3121, Parramatta, 2124, Australia
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
