Re: Fine and secure dining, was Re: svnadmin create and not being method agnostic

On Mon, Jan 3, 2011 at 8:46 AM, Les Mikesell <lesmikesell_at_gmail.com> wrote:

> On 1/2/2011 9:43 PM, Nico Kadel-Garcia wrote:
>
>>
>> It's possible to do secure Subversion. Use svn+ssh access, disable or
>> block other services at the firewall,
>>
>
> If ssh is permitted and you didn't personally set it up, what are the odds
> that port tunneling or ssh's built in socks proxy will allow access to every
> service behind the firewall?
>

The nice thing about SSH is you can disable those things via server
configuration. They are on by default in most distributions (and maybe
shouldn't be) but the configuration switches to turn them off are easy to
find.

-- 
David Brodbeck
System Administrator, Linguistics
University of Washington