[EMAIL PROTECTED] wrote:
>
>
> ftp passes usernames and passwords in plaintext. The only valid use of
> ftp in an unsecured environment is anonymous access to public files. If
> they sniff you ftp'ing in, and your telnet or ssh ports are open to the
> outside, they can then log in as you, from which position there are
> numerous ways to obtain the root password.
>
> If you really need external access to private files, use scp via ssh v2.
>
It's there mostly to move files to and from the kids' machine, which
also has our financial stuff on it. I've just never gotten around to
writing a rule to block access from outside. One more thing on the
list.
> >
> > I think I will leave sunrpc,
>
> in your configuration I see no reason to. It is like finger... a way for
> outsiders to scope you out.
>
It's compiled into the kernel as part of sysctl. I am not about to
rebuild the kernel just yet, so it will have to wait.
> It is a basic "cat >/dev/null" service. Probably not dangerous, but there
> is no reason why it should be enabled either.
Well, I guess I just have to figure how to get rid of it.
Cam
--
Cam Ellison Ph.D. R.Psych.
>From Roberts Creek on B.C.'s incomparable Sunshine Coast
[EMAIL PROTECTED]
[EMAIL PROTECTED]
