Re: Putting together a server/network...

[Gordon Grieder <grub@grub.net>]

On Fri, Nov 02, 2001 at 10:01:03PM -0800, Steve Wingate wrote:
> > I forbid the use of telnet.  By you, by anyone.  Just say "no,
> > thank you"
> > 
> Just out of curiosity, on a fully switched LAN why is telnet a bad thing?

"Fully switched" doesn't mean "highly secure".

Many (most?) higher end switches allow you to specify a mirror port which
will allow you to view all traffic by switch port or MAC. (as an aside, 
most of these switches will allow you to telnet into them.  Stick to those
with a serial port and disable telnet)

Just support one set of protocols and all is well. When the users whine 
about how hard scp is and the lack of ftp, show them sftp.

-- 
Gordon Grieder                        Join us, get cracking!
www.grub.net                             www.distributed.net
grub@grub.net                           grub@distributed.net