Re: question about SSH / IPTABLES
On Thu Jan 23 2003 at 01:17:21PM +0100 'I?aki Mart?nez' <debian@euskal-linux.org> wrote:
> But if the client jump to another port????
That is the shortcoming of using this solution.
> I think there is no COMPLETE solution........
If there is a rule there is generally some way around it ;) you need to
choose the solution that fits your situation best.
You could change the file permissions on the ssh binary AND use the
iptables rule. Also, mount the home partition read only so that they
cannot use their own binaries.
Another way of doing this may be to get a protocol analyzer like snort to
trigger the automatic addition of iptable rules if it sees outgoing ssh.
Ciao
Charl
__________________________________________________________________________
[ Charl Matthee ] [ +27-11-721-3800 ]
[ Systems Manager ] [ +27-11-405-6508 ]
__________________________________________________________________________
Reply to: