Re: OpenSSH server on Windows Server 2003?
"Brains,None" wrote:
> hhmm... is rdesktop also running the ssh too? i *worry* about leaving
> remote logins possible on my boxen...
My knowledge of Server 2003 is limited but I believe Remote Desktop
connections are a function of the "Terminal Services" service (on port 3389,
I think) and the OpenSSH Server runs as its own service (on port 22).
Remote administration is necessary in situations where physical access to
the server is restricted or impractical, but your worries about remote logins
are well founded. If you can effectively administer your server locally, it
will be more secure to turn off remote access services. It's always a good
idea to close any ports that don't _need_ to be open.
In both cases, I believe all the information in encrypted. The default
installation of Server 2003 doesn't seem to have limitation on how frequently
or in what quantity remote logins can fail so, as always, it's a good idea to
use an uncommon username (like first initial, last name or something similar)
and a relatively secure password.
Unfortunately, Windows does not offer something like sudo, so to
administrate the server the administration account itself must have the
ability to remotely log in.
HTH,
-Matt