From owner-freebsd-security Tue Dec 10 09:31:53 1996 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id JAA16224 for security-outgoing; Tue, 10 Dec 1996 09:31:53 -0800 (PST) Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.fr [193.56.58.253]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id JAA16215 for ; Tue, 10 Dec 1996 09:31:48 -0800 (PST) Received: from brasil.brainstorm.eu.org (brasil.brainstorm.fr [193.56.58.33]) by mexico.brainstorm.eu.org (8.7.5/8.7.3) with ESMTP id SAA16278 for ; Tue, 10 Dec 1996 18:31:42 +0100 Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.6.12/8.6.12) with UUCP id SAA21600 for security@freebsd.org; Tue, 10 Dec 1996 18:31:22 +0100 Received: (from roberto@localhost) by keltia.freenix.fr (8.8.4/keltia-uucp-2.9) id HAA11218; Tue, 10 Dec 1996 07:30:49 +0100 (CET) Message-ID: Date: Tue, 10 Dec 1996 07:30:48 +0100 From: roberto@keltia.freenix.fr (Ollivier Robert) To: security@freebsd.org Subject: Re: Running sendmail non-suid References: <199612092111.NAA17991@passer.osg.gov.bc.ca> <199612092233.OAA13422@itchy.atlas.com> X-Mailer: Mutt 0.53 Mime-Version: 1.0 X-Operating-System: FreeBSD 3.0-CURRENT ctm#2768 In-Reply-To: <199612092233.OAA13422@itchy.atlas.com>; from Brant Katkansky on Dec 9, 1996 14:33:29 -0800 Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk According to Brant Katkansky: > (*) Remote access (telnet only) will be permitted only via a few select > (and highly trusted) IP addresses. I realize that this makes the > system somewhat vulnerable to IP-spoofing, but some concessions had to be > made. Use SSH ! It is not vulnerable to IP spoofing. Your sessions will be encrypted, X11 is encrypted too and you can limit who is permitted to log on. -- Ollivier ROBERT -=- The daemon is FREE! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #31: Tue Dec 3 23:52:58 CET 1996