Egress filtering to prevent backchannel attacks?

Jul 08, 2006 1 Replies

I'm setting up a Linux server that will run only two services: ssh and httpd.



Some of the security books I've been reading mention backchannel attacks, where the cracker runs a client (like telnet, ftp, an xterm, etc) back from the server host to his machine.



Can the likelihood of backchannel attacks be decreased using a host-based firewall (in my case, using kernel-level packet filtering) to do egress filtering?



TIA.



Sounds good. Sounds like you're thinking about the problem.

No.

Better don't use public ssh with passwords, but SSH only from a defined group of hosts and with RSA or DSA. And try to implement a secure httpd.

Yours, VB.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required