|
|||
ifconfig and ssh question
We have an internet server on an openbsd box (ver 5.3)
receiving traffic on port 80 from the wan to various virtual hosts. traffic is directed to this machine via an off the shelf router. (only because i have not completely figured how to write the pf redirection code) The internal internet server only serves port 80 traffic unless it is generated statefully outbound from itself. I have set up a pf.conf file filtering traffic on this server. I currently ssh into this box via fxp0 along with internet traffic. PF is set to only allow ssh traffic from lan and is configured with antispoof entries. All our servers have many nic cards. Question: Would if help security to ssh into this box using fxp1 instead of fxp0 i.e. physically seperating WAN internet and ssh traffic. adding entries into pf.conf as necessary. ????? .AND. if so What would be the diff in doing that with using an alias on fxp0 ?????? thankyou in advance..... |
|
||||
If you've not used Public Key Authentication before, here's a simple "how to":
http://www.daemonforums.org/showthre...3067#post22743 |
|
|||
thankyou
|
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
ifconfig athn0 | marconi | OpenBSD General | 6 | 25th March 2012 02:39 PM |
PF - ifconfig problem | ripp3r | OpenBSD Security | 5 | 12th December 2010 04:10 PM |
need some basic help on ifconfig | daemon-dd | FreeBSD General | 4 | 29th July 2008 03:21 PM |
FreeBSD's Ifconfig for WEP | tz24 | FreeBSD General | 15 | 13th June 2008 02:17 AM |
ifconfig problem | ichigo | OpenBSD General | 3 | 20th May 2008 10:59 PM |