RE: [cobalt-security] Easy Question

["Colin J. Raven" <cjraven@xxxxxxxxxxx>]

John;
I wouldn't shut down httpd *necessarily*, the GUI provides that "other
way in"
If you disable telnet (in the GUI) and restrict httpd access to
"regsistered users" you can always selectively *enable* telnet if you
need it. That's one approach.
BUT:-
The alternate approach is to install ssh, and amongst other things, that
prevents paswords "in the clear" zooming around your network <shudder>
On balance, I prefer ssh as the only means of access to the box.
There's an article on installling it on the Cobalt website at:-
http://www.cobalt.com/support/kb/faq.php3?query=ssh
(That's just the query string, sorry!)
Unfortunately there are too many folks logged on right now,
<sidebar>
(Hey Cobalt! What the hell is this; "Warning: Unable to connect to
PostgreSQL server: Sorry, too many clients already in
/home/sites/site1/web/community/classes/db.class on line 57
ERROR: Couldn't make database connection" all about eh???)
</sidebar>

Anyway, I hope this helps.
Regards,
-Colin
--
Colin J. Raven
Chief Engineer, HDS Lab, Inc.
(914) 835 2200 EXT 180
ICQ#:94353687
mailto:colin@xxxxxxxxxxx

>-----Original Message-----
>From: cobalt-security-admin@xxxxxxxxxxxxxxx
>[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of
>John Anderson
>Sent: Monday, December 11, 2000 3:01 PM
>To: cobalt-security@xxxxxxxxxxxxxxx
>Subject: [cobalt-security] Easy Question
>
>
>Hi,
>
>I've got a fairly easy question.  I've got a Cobalt Qube that I am
>locking down for security.  I've closed all the ports I don't need,
>including both of the web servers (httpd and ahttpd).  One of
>the things
>that I would like to be able to do is turn Telnet off.  (I've already
>installed SSH.)
>
>My concern is once I shut Telnet down, how can I gain access
>to the Qube
>if the sshd dies?  Since there isn't a keyboard and monitor for the
>Qube.
>
>Other than hard powering it down, is there another way into the box?
>(And can you point me to a good HowTO for installation, weather or not
>it's Qube or Cobalt based.)
>
>Thanks in advance,
>
>
>--John
>
>
>
>
>--
>John Anderson
>janderson@xxxxxxxxx
>Ceeva, Inc.
>
>
>_______________________________________________
>cobalt-security mailing list
>cobalt-security@xxxxxxxxxxxxxxx
>http://list.cobalt.com/mailman/listinfo/cobalt-security
>