What to do?
Firewalls
- deny ip spoofing, only accept limited protocols
Secure Shell (www.cs.hut.fi/ssh/)
- encrypts data and passwords
- for UNIX - public domain (Windows - not free)
- replaces rlogin,rsh,rcp
- also secure X.11 and forwarding of arbitrary TCP
- can’t run it in France (CERN!)
S/Key (one time passwords) - commercial
TCPwrapper - to monitor and block