Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Become a Marketplace Partner

internet.commerce
Be a Commerce Partner














The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Subscribe News
Subscribe PR
Subscribe Security

internet.com
IT
Developer
Internet News
Small Business
Personal Technology

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

 






Current Newswire:

Vim 101: A Beginner's Guide to Vim

Open Source Science: A Revolution From Within

openSUSE 11.2-- Incremental Updates, Plenty of Polish

Microsoft, other rivals slam Google Chrome OS

Intel Linux Graphics Shine With Fedora 12

Editor's Note: Do It Yourself "Cloud"

Google Chrome OS: First looks, first impressions

Kernel Log: Coming in 2.6.32 (Part 3) - Storage

TV Mythos Renewed: MythTV 0.22 with Many Improvements

Enhancing openSUSE 11.2: Adding Repositories and Packages




Technical Specialist II – PC – LAN (AZ)
Next Step Systems
US-AZ-Scottsdale

Justtechjobs.com Post A Job | Post A Resume
:Hacking Linux Exposed: SSH Bouncing--How to Get Through Firewalls Easily
Hacking Linux Exposed: SSH Bouncing--How to Get Through Firewalls Easily
Sep 1, 2004, 07 :00 UTC (8 Talkback[s]) (15358 reads)

(Other stories by Brian Hatch)

"Have you ever been in the situation that you wanted to SSH directly to a machine, but there has been some device in between that prevents it? Say you have a Linux firewall that protects your DMZ, and you have a boatload of machines behind it that you want to manage. There are all sorts of methods that are used to do so, and all have some level of annoyance.

"The first and most simple solution is to SSH to the machine in the way, say the firewall. The firewall administrator can just set up one or more non-privileged accounts for users who need access to the machines behind it. This is a pain, of course--if you want to upload a file, you need to upload it to the firewall via sftp/scp, and then upload it to the target server. What a pain. And security-wise, you now have all these random firewall accounts running amok, probably not your favourite situation..."

Complete Story

Related Stories:
CrossNodes: The Serial Console: A Front Door Worth Leaving Open(Aug 20, 2004)
NewsForge: A Critique of Port Knocking(Aug 11, 2004)
SitePoint: Use Webmin for Linux Administration, Parts 1 and 2(Jun 09, 2004)
Linux Exposed: Kerberos Security(Sep 23, 2003)


Index Mode   |   Flat Mode   |   Thread Mode   |   Thread Flat  
  Talkback(s) Name  and Date
Shame on you for posting something that  ...   Oh, please   
Donna Larson
Sep 1, 2004, 08:46:56
 
Oh, shut up! Security through obscurity  ...   Re: Oh, please   
alison
Sep 1, 2004, 12:17:04
 
Ummm... if you read the article you' ...   Re: Oh, please   
Ben
Sep 1, 2004, 12:23:32
 
Given that you would need (for this to w ...   Re: Oh, please   
Tom W.
Sep 1, 2004, 13:16:28
 
> Shame on you for posting something tha ...   Re: Oh, please   
Evan Dodd
Sep 1, 2004, 14:08:35
 
Oh no... This will no doubt be used by l ...   fueling the FUD   
robbob
Sep 1, 2004, 14:23:31
 
The replies to this article pretty well  ...   Ignorance Considered Harmful   
DanielB
Sep 1, 2004, 16:38:47
 
Hm... what is the advantage of using suc ...   Why not -L and -R?   
Ike To
Sep 2, 2004, 14:08:40
 
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!






..............................




All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP

internet.commediabistro.comJusttechjobs.comGraphics.com

Search:

WebMediaBrands Corporate Info

Legal Notices, Licensing, Permissions, Privacy Policy.
Advertise | Newsletters | Shopping | E-mail Offers | Freelance Jobs