From owner-freebsd-security Thu Mar 25 2:28:26 1999 Delivered-To: freebsd-security@freebsd.org Received: from shibumi.feralmonkey.org (shibumi.feralmonkey.org [203.41.114.182]) by hub.freebsd.org (Postfix) with ESMTP id 0E9AD14FD8 for ; Thu, 25 Mar 1999 02:28:06 -0800 (PST) (envelope-from nick@shibumi.feralmonkey.org) Received: from localhost (nick@localhost) by shibumi.feralmonkey.org (8.9.2/8.9.2) with ESMTP id VAA83877; Thu, 25 Mar 1999 21:27:06 GMT (envelope-from nick@shibumi.feralmonkey.org) Date: Thu, 25 Mar 1999 21:27:05 +0000 (GMT) From: 0x1c To: Mike Thompson Cc: freebsd-security@FreeBSD.ORG Subject: Re: Kerberos vs SSH In-Reply-To: <4.1.19990325001254.009fb5e0@mail.dnai.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 25 Mar 1999, Mike Thompson wrote: [snip] > A few questions I have are: > > 1. Can I use standard tools such as rsh, rlogin and the like > securely between servers with such a configuration? Or do > I want to still stick with ssh? It provides an encrypted ip tunnel between two endpoints. Hence, it is transparent at the application layer. > 2. Do special versions of tools have to be compiled to work > with the VPN, or are standard tools OK? Standard tools are ok. > 3. Are there implications with running IPFW on a system that > has a KAME installed in the Kernel? I'm not aware of any off the top of my head, however I doubt there would be any major complications with such a setup. > 4. The documentation seems a little terse. Is there a good > tutorial that explains how to get started with KAME on a > FreeBSD system? I think the people who develop KAME are pretty available for specific questions via email. If you have any particular queries they should be able to help. With regards to a tutorial, i'm unaware of any. > Thanks, > > Mike Thompson Cheers, Nick -- Therefore those skilled at the unorthodox are as infinite as heaven and earth, inexhaustible as the great rivers. -- Sun Tzu, The Art of War To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message