Unless you are using one-time passwords, you'll need to lock down both telnet and ssh (and any other remote access server) to the same IPs and ensure that user/root passwords on that box are different than anywhere else. Even if using one time passwords, assume the world can see everthing you type. You'll need to physically secure the server so only trusted folks have access to the physical console. Huge can of worms. Good luck, -Allen -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list