RE: [cobalt-users] rsh to a RaQ4i

[Víctor Villar <victor@xxxxxxxxxxxxxxxxx>]

Yes ok, I know the security problem with r-commands, but we have configured
the Firewall to prevent anti-spoofing and the port for r-commands is not
accesible from the out-side world, only from the private LAN

And I need the rsh command :)

Victor.

-----Mensaje original-----
De: Tim Dunn [mailto:tdunn@xxxxxxxxxxxxxxxxxxx]
Enviado el: jueves, 22 de agosto de 2002 17:28
Para: cobalt-users@xxxxxxxxxxxxxxx
Asunto: Re: [cobalt-users] rsh to a RaQ4i


> 	I configure a user to accept rsh from another Linux and Unix
> machine.

You don't.  Berkley r-commands (rexec, rsh, rcp and rlogin) have
security problems.  They don't exchange passwords, but instead 
rely on the connection comming from a known IP address on a 
privileged port.  This is relativly easy for a hacker to spoof. 

Use ssh instead.

tim

-- 
	"There are 10 types of people in this world: people who can
	 understand binary, and people who can't." -- my boss

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users