[wplug-bsd] Root logins and public keys

Bill Moran wmoran at potentialtech.com
Sat Dec 3 21:28:40 EST 2005


Brandon Kuczenski <brandon at 301south.net> wrote:
> On Sat, 3 Dec 2005, Bill Moran wrote:
> 
> >
> > An alternative would be to run 2 sshds.  One on the the external interface,
> > and the other only on the loopback.  Then you could configure each specific
> > to the way you want it to work.  The internal accepting keypairs only, and
> > the external refusing all root logins.
> >
> 
> So, I would do that by creating a new rc script in /usr/local/etc/rc.d and 
> using that to start a new ssh daemon with a different config file?

That was the thought.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


More information about the wplug-bsd mailing list