On 8/28/06, Joachim Schipper <[EMAIL PROTECTED]> wrote:
Of course, localhost is a very nice place to start a brute-force attack, so choose a good password or just disable password authentication in sshd. After all, you'll want to use a serial cable anyway.
I've disabled sshd on my wrap router, and the only secure login is via serial cable. I only login as root on my router, as there is nothing I would do on a router that doesn't require root. Usualy just ifconfig, pfctl, dhclient, etc. I just giggle every time I login to my router -- I have no root password set! *dodges*... its just a home network, whatever. It is convenient, though: sudo tip -38400 tty00<cr>root<cr><cr><cr> If I could only get my Informer[1] to work properly, I might add a local user and use it to ssh out through the router and play nethack or something. A dumb terminal being the only form of login would be ideal :) [1] http://www.ba23.org/page0291.html