Re: AW: [cobalt-users] Security Programs

[elmer@xxxxxxxxxxxxxx]

On Fri, 9 Mar 2001, Steve wrote:

} I think protecting your server by programs is one thing, but does it improve
} the security of a server if you let it only be root-accessed by SSH from a
} single IP? What do you think of that and has anyone tried that yet?

We do this here. We have one "control" station and it's the only box
that's allowed root access on any of our servers and shell access on
most of them.

	Does it make our servers any more secure? All I can say it
that it certainly does not make them any less secure. But, realize,
that spoofing an IP address is no big deal. Thus this is not a means
to an end, but rather a small part of a solid security envelope.