View Single Post
  #3   (View Single Post)  
Old 28th December 2009
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,131
Default

How about being generous with Superglue on the PS/2 and USB connectors on the firewall? That way nobody can use a keyboard

To be serious, if you cannot prevent physical access by unauthorized persons, there is no true security. Even if you would disable console access, they still can press the RESET button, pull out the power cord, or change the disk or CF card.

If they take your disk out, put it in another machine, reboot it single user mode, they can change the root password, remove or change your SSH keys. If after that, they put back the disk, you have a slight problem
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump

Last edited by J65nko; 28th December 2009 at 08:54 AM. Reason: typo
Reply With Quote