Re: Web-based remoting...

BearItAll wrote:
But an ssh tunnel is just that, a tunnel from one place to another. For IT
purposes you are much more likely to want VPN (putting the traffic of one
network onto another), so that you can get around the network. For this
lookup the HOWTO for IPsec vpn, the howto is easy to find in google because
it is very popular, clear and easy to follow.

Uh, sorry? When I ssh to a machine, I am on that machine. I have access
to anything as if I were sitting on that machine. I ssh to machines 2
meters away and to machines that are in another country.

You can even try it out and telnet to 'localhost'. Tell me what the
difference is between a terminal and a terminal where you did a 'ssh
localhost'.
--
houghi
They say pesticides have been linked to low sperm counts.
In my opinion if you have bugs down there that are so bad
you need to use a pesticide, you're not gonna get laid anyway.
.

Relevant Pages

  • Re: VPN Access for Consultants
    ... They want to be able to access their network and our network ... VPN between their network and my own. ... Even though both are exposing holes in the firewall, VPN and SSH are ...
    (Security-Basics)
  • Re: IPSec VPN into XP Pro
    ... I use SSH all the time - but not for tunneling on XP machines ... It has a built in VPN engine... ... Jeffrey Randow (Network MVP) ... >a few consumer grade routers and the problems encountered getting a PPTP tunnel through them... ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Questions on secure remote access to Fedora Core 2
    ... that no single plain-text byte ever enters the wire. ... That's the first I've heard of Network Block Devices. ... Would a cryptographic VPN be "better" than SSH and friends, ...
    (comp.os.linux.security)
  • RE: Terminal Services over VPN
    ... and learn why you don't want to trust RDP over an untrusted network. ... > it's a Windows server though, as I don't know of any free SSH ... >> Has anyone used Terminal Services over Microsoft's VPN ...
    (Security-Basics)
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
    ... This set of steps is redundant in many places, and it's also enormously expensive, since you're using no less than three different expensive bits of networking hardware (AP, PIX, VPN Concentrator), in addition to a bunch of x86 server hardware, windows server licenses, and at least one ISA license. ... Your computers necessarily don't have full access to your network infrastructure when they aren't logged on, so GPOs, software updates, etc can't be applied at the times you want them to be applied. ... Turning on, enabling, and implementing every possible security setting and device you think of is not defence in depth, and will probably only have two effects - your users won't use your wireless network, and you'll burn so much cash you won't have any left to spend on *useful* security measures. ...
    (Full-Disclosure)