Sunday, September 16, 2007

Hardening OpenSSH with Single Packet Authorization

SSH is a critical service for encrypted connectivity, but even OpenSSH occasionally has security vulnerabilities. It is risky to allow arbitrary IP addresses to connect to your SSH daemon, but if I'm on travel how can I still gain access if all connections are silently dropped by my firewall? Single Packet Authorization (SPA) provides an answer.

read more | digg story

No comments: