Re: [vox-tech] ssh/telnet security question

[Eric Engelhard <ekengelhard@sagresdiscMAPSovery.com>]

We are in the process of moving to a new location and the cluster and db
servers are all on a remote private net and behind a firewall/masq. I
use ssh to get to the db and master nodes, but telnet and even rlogin
and rexec (oh heavens!) within the cluster (own subnet). I suppose I
could be paranoid about a vindictive employee and encrypt all traffic. I
suppose it is a question of my personal lazy : paranoid ratio. As
opposed to my laziness : impatience : hubris ratio... Perl!

Jan Wynholds wrote:

> A while back, there was some mention (I think it was
> Pete) of using telnet and ssh.
>
> Here is what I remember:  If you use client A to
> contact telnet server B, then ssh from B to ssh server
> C, then the transmissions from A to B, and from B to C
> all become subject to cracking/sniffing.  I have a
> question about another case.  What if A and B are on a
> firewalled/masqueraded (and the configuration of both
> is secure) local net, while C exists somewhere out on
> the internet.  Are the transmissions from (A to B and)
> B to C still at risk for cracking/sniffing?
>
> My guts tell me no (b/c of the masq/firewall), but I
> am very new to this sort of analysis.
>
> If nobody knows, would this be a suitable question for
> Dr. Bishop tonight?
>
> Thanks,
> J
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/

--
Eric Engelhard, Ph.D.
Bioinformatics Scientist
Sagres Discovery
(530) 297-4711
ekengelhard@sagresdiscovery.com