[aclug-L] Re: suggested topic

["Michael Holmes" <aerospaced@xxxxxxx>]

That is basically what I do, we have the cisco vpn and so I get a local ip
and cisco blocks the port outside the building
So you have to be trusted before you can connect. 


Michael Holmes

708 West 46th St. South

Wichita, KS 67217

(316)522-3637(h)

(316)619-7339(c)

 


-----Original Message-----
From: discussion-bounce@xxxxxxxxx [mailto:discussion-bounce@xxxxxxxxx] On
Behalf Of Jonathan Hall
Sent: Tuesday, October 14, 2008 8:18 AM
To: discussion@xxxxxxxxx
Subject: [aclug-L] Re: suggested topic

The best way to secure webmin is to uninstall it :)

It is inherently an insecure application... Now some measures can be taken
to make it LESS insecure (i.e. block access from all IPs except your own,
remove any modules you don't actually use, don't install it on any servers
that hold or have direct access to sensitive data, etc).  
But the consensus among security-conscious administrators is, you shouldn't
use it.

Security or Ease of Use, pick one.

--
Jonathan


Michael Holmes wrote:
> Something I use a lot at work is webmin, and the trouble is, I am just 
> scraping the surface of its abilities.  How about a discussion of 
> webmin's installation and securing it.
>  
> Michael Holmes
> 708 West 46th St. South
>
> Wichita, KS 67217
>
> (316)522-3637(h)
>
> (316)619-7339(c)
>
>  
>
>  
>
>
> -- This is the discussion@xxxxxxxxx list.  To unsubscribe, visit 
> http://www.complete.org/cgi-bin/listargate-aclug.cgi
>
>   


-- This is the discussion@xxxxxxxxx list.  To unsubscribe, visit
http://www.complete.org/cgi-bin/listargate-aclug.cgi


-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi