[BlueOnyx:12283] Re: Kernel 0-day vulnerability + SSHd Spam Exploit (libkeyutils.so.1.9)

[Marcello Torchio]

Hi everybody,

i'm following this thread.

I'm running two different BO machines. 5108R based. These two boxes are
behind a firewall.

I've enabled SSH server on both of them, but i'm managing access to this
service through TCP WRAPPERS so only specified IPs can connect to ssh
server, otherwise the connection will be refused.

Is it secure or it should be better to set a rule on firewall and manage ip
based accesses from there?

Thanks


2013/2/24 Jon McCauley <jon at ontarioweb.ca>

> On 2/23/2013 2:12 PM, Michael Stauber wrote:
> > Hi Richard,
> >
> >> Would it help to disable SSH via the GUI for the time being?
> > Yes, it's an option.
> better safe then sorry, I also turned of all SSH and closed at the
> router level
>
> Best Regards, Jon McCauley
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20130224/0759f0f0/attachment.html>