yast on a SSH-Shell

1 Aug 2003

      Hi Andy,

I am also a Newbee Linux. I have now a webserver located at the isp which I
need to administer via ssh and confixx.
You are mentioning here to administer such a server via ssh and yast. Is it
possible to run yast over a SSH shell?
Also the support people of the ISP advised me, that a firewall for a server
is not indicated. What do you think about this? Intuitively I would not
consider a computer connected to the internet without any protection as
apropriate.

Grieetings

Johannes Stockburger

Pamellahs Best Price Travel
Johannes Stockburger
Hermann-Steinhäuser-Str.18
63065 Offenbach

Tel 069-82368993
Fax 069-82368992

stockburger@bestpricetravel.de
http://www.bestpricetravel.de
http://linienflug.bestpricetravel.de
http://www.visit-your-family.de

----- Original Message ----- 
From: "Andy Bennett" 
To: "João Reis" ; 
Sent: Thursday, July 31, 2003 8:34 PM
Subject: Re: [suse-security] Webmin security

Webmin implies running the webmin server, miniserv.pl and perl both of which
are security holes in themselves. Also they need maintaining.

I'd use SSH and yast/editing files for security considerations. Yast makes
keeping a system patched quite easy now with the online update assuming your
system is pretty minimal which is what most servers are, i.e. no X-server,
KDE, etc. etc.

Andy

On Thursday 31 July 2003 16:37, João Reis wrote:
...
Hi again.
My main question is if the Webmin is a good tool to do remote
administration or are better tools ?
On Thursday 31 Jul 2003 16:35, Arndt Faulhaber wrote:
...
Hi Joao,
...
Does anyone knows if the Webmin permits to do a administration of the
systems securely ?
Jup, you can setup webmin to use https.
...
Example if i connect from home to my company to administer my systems
with webmin is there any secyrity flaws or if it is not advisable ?
Otherwise you can access it using ipsec... or restrict the IP address
from which access is possible...
Cheers, Arndt
-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@suse.com
Security-related bug