Hi Andy, I am also a Newbee Linux. I have now a webserver located at the isp which I need to administer via ssh and confixx. You are mentioning here to administer such a server via ssh and yast. Is it possible to run yast over a SSH shell? Also the support people of the ISP advised me, that a firewall for a server is not indicated. What do you think about this? Intuitively I would not consider a computer connected to the internet without any protection as apropriate. Grieetings Johannes Stockburger Pamellahs Best Price Travel Johannes Stockburger Hermann-Steinhäuser-Str.18 63065 Offenbach Tel 069-82368993 Fax 069-82368992 stockburger@bestpricetravel.de http://www.bestpricetravel.de http://linienflug.bestpricetravel.de http://www.visit-your-family.de ----- Original Message ----- From: "Andy Bennett" <andy@mcrentals.demon.co.uk> To: "João Reis" <joao.reis@2000comp.pt>; <suse-security@suse.com> Sent: Thursday, July 31, 2003 8:34 PM Subject: Re: [suse-security] Webmin security Webmin implies running the webmin server, miniserv.pl and perl both of which are security holes in themselves. Also they need maintaining. I'd use SSH and yast/editing files for security considerations. Yast makes keeping a system patched quite easy now with the online update assuming your system is pretty minimal which is what most servers are, i.e. no X-server, KDE, etc. etc. Andy On Thursday 31 July 2003 16:37, João Reis wrote:
Hi again.
My main question is if the Webmin is a good tool to do remote administration or are better tools ?
On Thursday 31 Jul 2003 16:35, Arndt Faulhaber wrote:
Hi Joao,
Does anyone knows if the Webmin permits to do a administration of the systems securely ?
Jup, you can setup webmin to use https.
Example if i connect from home to my company to administer my systems with webmin is there any secyrity flaws or if it is not advisable ?
Otherwise you can access it using ipsec... or restrict the IP address from which access is possible...
Cheers, Arndt
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug