IWETHEY v. 0.3.0 | TODO
1,095 registered users | 1 active user | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / a couple of things now I understand
Post #55,626
by boxley
10/8/02 9:25:18 PM
Reply
New a couple of things now I understand
If you are using an ssh outbound only firewall rule that is reasonable usage. What type of data, is it binary? database dumps? text?
A strict rsf share on the outside box to the inside box with the rfs port open on the fw then cron cp's the data to the rfs drive that is mounted to the inside box. Not in place of your solution which is reasonable but as an alternative. Also nfs over ssh would do the same thing and would not really require a login of any sort. rfs is more secure though. Oracle over ssh is also useful if you have databases out there.
thanx,
bill
will work for cash and other incentives [link|http://home.tampabay.rr.com/boxley/resume/Resume.html|skill set]

"Therefore, by objective standards, the leading managers of the U.S. economy...are collectively, clinically insane."
Lyndon LaRouche
Post #55,688
by ben_tilly
10/9/02 6:22:45 AM
Reply
New The kind of data doesn't matter
The solution I offered is flexible. It will even cover the case where you need to run a few remote scripts.

Also I note that when people talk of copying data, my immediate thought is whether they have encountered the wonderful thing known as [link|http://samba.anu.edu.au/rsync/|rsync].

Cheers,
Ben
"Career politicians are inherently untrustworthy; if it spends its life buzzing around the outhouse, it\ufffds probably a fly."
- [link|http://www.nationalinterest.org/issues/58/Mead.html|Walter Mead]
     ssh-agent -- anyone using? - (kmself) - (14) - Oct. 7, 2002, 09:51:38 PM EDT
         Yes... Also exchanging... - (folkert) - (1) - Oct. 7, 2002, 11:43:04 PM EDT
             Tricks, books - (kmself) - Oct. 8, 2002, 12:31:37 AM EDT
         so all I need is one of the boxen you are running - (boxley) - (10) - Oct. 8, 2002, 08:39:58 AM EDT
             No... - (folkert) - Oct. 8, 2002, 12:37:49 PM EDT
             No. - (ben_tilly) - (8) - Oct. 8, 2002, 06:42:50 PM EDT
                 if I have rooted your box, the first aim of a crack - (boxley) - (7) - Oct. 8, 2002, 08:12:13 PM EDT
                     Sample usage - (ben_tilly) - (5) - Oct. 8, 2002, 08:56:39 PM EDT
                         a couple of things now I understand - (boxley) - (1) - Oct. 8, 2002, 09:25:18 PM EDT
                             The kind of data doesn't matter - (ben_tilly) - Oct. 9, 2002, 06:22:45 AM EDT
                         Automated transfers using locked-down SSH keypairs - (rickmoen) - (2) - Nov. 3, 2002, 04:09:06 AM EST
                             Rock. Thanks for posting that. -NT - (admin) - Nov. 3, 2002, 10:00:24 AM EST
                             Question - (ben_tilly) - Nov. 3, 2002, 12:11:22 PM EST
                     Re: if I have rooted your box... - (kmself) - Oct. 9, 2002, 12:32:09 AM EDT
         Used to use it ... loved it - (drewk) - Oct. 8, 2002, 07:06:19 PM EDT

drook is not your Guinea pig.
68 ms