Re:Protecting sshd using spiped
by casca on Thursday August 30, 2012 @08:36AM
(#4454272)
This feature seems to be offering similar functionality to OpenVPN's tls-auth which requires an additional key before a connection is allowed. Another option to get similar functionality would be to use port knocking [1][2] but spiped gives other useful functionality too.
Re:Protecting sshd using spiped
by cperciva on Thursday August 30, 2012 @08:43AM
(#4454300)
I was intending to mention port knocking in that blog post but didn't find a convenient point to fit it in. Yes, it's definitely an alternative solution to the "let me connect to sshd but not anyone else" problem.
[1] http://www.portknocking.org/ [2] http://www.thoughtcrime.org/software/knockknock/