openbsd-misc
[Top] [All Lists]

Re: Onle special programs can connect?

To: talos <talos@aint.nu>
Subject: Re: Onle special programs can connect?
From: "David S." <davids@idiom.com>
Date: Thu, 28 Feb 2002 14:02:23 -0800
Cc: misc@openbsd.org
In-reply-to: <Pine.BSO.4.44.0202282238340.5237-100000@retrodeck>; from talos@aint.nu on Thu, Feb 28, 2002 at 10:39:53PM +0100
References: <Pine.BSO.4.44.0202282238340.5237-100000@retrodeck>
Sender: owner-misc@openbsd.org
User-agent: Mutt/1.2.5i
> Hi, is there a way to force OpenBSD to only allow one (predefined) program
> to connect to a certain host and/or port?

How do you indentify this "predfined" program?  With 'pf' you can restict
access via port, IP address, and protocol.  By wrapping a port with 'ssh'
or 'stunnel', you can (I think) restrict access to something presenting
a proper SSH key or certificate, respectively.  You can probably do 
something similar with IPSEC+AH.  Depends on what you have in mind ...

David S.

<Prev in Thread] Current Thread [Next in Thread>