Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jun 1997 15:33:51 -0400 (EDT)
From:      Nathan Dorfman <nathan@senate.org>
To:        jas@flyingfox.com (Jim Shankland), freebsd-security@freebsd.org
Subject:   Re: SSHD from Inetd
Message-ID:  <199706261933.PAA20854@limbo.senate.org>
In-Reply-To: <199706261931.MAA00269@biggusdiskus.flyingfox.com> from Jim Shankland at "Jun 26, 97 12:31:08 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Actually I wanted sshd to run with tcpd :) is it possible to do that
without inetd? Also, I have seen where sendmail was tcpd'd and HELO
would report a pident output! Any info on this?

> Firing up sshd from inetd is a bad idea, as sshd does non-trivial key
> generation work on startup.  It really wants to start up once, then fork
> for each incoming connection.
> 
> Or you can do what we've done on some of our machines, and turn off inetd,
> leaving *only* sshd running.  Who needs legacy protocols like telnet and
> ftp when you've got sshd?  (Tongue partly in cheek here; but only partly.
> This really does work well in some environments.)
> 
> Jim Shankland
> Flying Fox Computer Systems, Inc.
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199706261933.PAA20854>