[rescue] SGI fw_sshd and security

[Gary Nichols]

On Fri, 5 Mar 2004, Sheldon T. Hall wrote:
> Hmmm.  The port is exposed to the internet so my son can use the machine,
> but I have the sshd access restricted by username (using the "AllowUsers"
> line in /etc/ssh/sshd_config, and that's the only port exposed.  I have
> previously considered it secure.

You should really run SSH on another port besides 22 and consider using
shared keys on both sides along with password authentication.