Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 May 2009 19:40:32 +0200
From:      Polytropon <freebsd@edvax.de>
To:        utisoft@gmail.com
Cc:        Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>, freebsd-questions@freebsd.org, Chris Rees <utisoft@googlemail.com>
Subject:   Re: Remotely edit user disk quota
Message-ID:  <20090528194032.e31ec225.freebsd@edvax.de>
In-Reply-To: <b79ecaef0905281004h7a1f40cvb65f005d9ebe5318@mail.gmail.com>
References:  <200905281030.n4SAUXdA046386@banyan.cs.ait.ac.th> <200905280847.12966.kirk@strauser.com> <alpine.BSF.2.00.0905281553001.60364@wojtek.tensor.gdynia.pl> <200905280904.44025.kirk@strauser.com> <20090528183801.82b36bbb.freebsd@edvax.de> <b79ecaef0905281004h7a1f40cvb65f005d9ebe5318@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 28 May 2009 18:04:23 +0100, Chris Rees <utisoft@googlemail.com> wrote:
> [The OP] even said 'secure' twice. There is a web server involved, meaning
> possibility of compromise (we all know how secure web servers tend to
> be), and then one has access to network traffic for sniffing. Also, if
> this is for quotas, then surely the people accessing the server via
> *NFS* are inside the network?

Yes, I agree to that, but it doesn't stand in any contradiction to
what I said, or what Wojciech said.

So for the OP, security is needed. As it has been mentioned, using
encryption tunnels is one (valid) means to do this, SSH is another,
and both of them can even be combined. If the environment is that
insecure that it doesn't allow rsh / rlogin, then DO NOT USE IT.
But if it is, why not? At least, the OP's description involving
web servers doesn't justify using "just" rsh / rlogin, and not
telnet, of course. :-)


-- 
Polytropon
>From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090528194032.e31ec225.freebsd>