Re: ssh defeats the firewall

[John Adams <jna@retina.net>]

On Thu, 20 Apr 2000, Tony Iannotti wrote:

> On Thu, 20 Apr 2000, David Lang wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > 
> > This is exactly the reason why I do not allow SSH through the firewalls I
> > manage.
> 
>   You can control that if you can work in concert with the box admins. 
> Sshd can be configured not to tunnel, if all you need to support is a
> telnet replacement. Of course, you have to trust the box admins..... 

But what stops me from running sshd on a linux or my windows NT box? You
can't stop it unless you use application level proxies or intelligent
firewalls.


-john

-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]