Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Aug 2006 09:02:14 +0700 (ICT)
From:      Olivier Nicole <on@cs.ait.ac.th>
To:        zope@2012.vi
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Finding IP Addresses (OT)
Message-ID:  <200608110202.k7B22Er7052574@banyan.cs.ait.ac.th>
In-Reply-To: <44DB7888.6080807@2012.vi> (message from beno on Thu, 10 Aug 2006 14:18:48 -0400)
References:  <44DB7888.6080807@2012.vi>

next in thread | previous in thread | raw e-mail | index | archive | help
Beno,

> I'm configuring my IP filter and I need to figure out what IP addresses 
> I use (via SSH2) to contact my server. 

I'd advise you not to filter SSH by IP, that would be the best way to
lock you out of your server.

Even if you find all the IP used by your ISP, you cannot predict when
the IP range will change, and it DOES change.

If you limit the IP that can SSH to your server, you will not be able
to login when you are traveling and some urgent administration task
need to be performed. And the most urgent tasks must often be
performed when traveling...

Set a strong password to your account (8+ characters, using letters up
and lower case, numbers and punctuation signs), do not allow SSH to
root account, enforce using sudo instead of su.

That's the best way in a long run.

Olivier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200608110202.k7B22Er7052574>