Re: Iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Hi,

Am 11.02.20 um 16:15 schrieb NTS:
> - The ssh port is fixed as TCP port 12500.  Since 12500 >1024 this
> is a non-priviledged port which is a security risk.  Ports < 1024
> can only be opened (here: state LISTEN) by root, others by everyone.

While technically this is true, I'm not convinced that this matters in
practice in most environments.

> If a user manages to crash your sshd then they can start their own
> service at that port.

This requires local users/attackers with shell access. Not necessarily a
concern in every environment.

Best regards,
Karol Babioch

Attachment: signature.asc
Description: OpenPGP digital signature


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux