Firewall security: Problems with simple Samba file share 3602

I am sorry - if one cannot log in to them, then there is no point in allowing acceses from them to sshd. Come to that, if they don't support human beings, what do they do?

Or are you suggesting that they are used for certain automated tasks, and they scp over certain updates of their software or orders from time to time.

Legitimate usage, but hardly of bearing to a discussion of whether a newbie gains anything from putting up a f-w on his simple machine.

I still haven't seen such an example! But you seem to be giving it for free, without an example, so never mind.

But as I said - how did they steal the key? If they can do that, then it doesn't seem to me that you can be protecting anything ELSE of value! The secret key has to be the maximally protected object on your system.

It doesn't - those are exploited as easily from one location as from the next.

But as I said, it looks (whether you consider it an ad hominen attack or not) that your experience is with buffer overflows and the like, not with cryptography, and this makes certain of the things you say look weird to others - let the chinese attack your sshd and good luck to them! If your sshd were vulnerable to the chinese it would be vulnerable to the russians and the koreans and the israelis also. And if the chinese really had a crack for sshd, then wouldn't be wasting the element of surprise on you, they'd be looking at the white house.

Peter