<br><br><div class="gmail_quote">On Tue, Feb 9, 2010 at 1:20 PM, Kenneth Emerson <span dir="ltr"><<a href="mailto:kenneth.emerson@gmail.com">kenneth.emerson@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br><br><div class="gmail_quote"><br><div>Once you open up port 22 on your mythtv box to the internet, it will be hit by computers trying to hack into it (check out logwatch to find out). If you leave userID logins enabled, odds are you will eventually get hacked.<br>
</div></div></blockquote><div><br><br>You don't need port 22. I said SSH, which can run on any port. Denyhosts goes a long way toward stopping the random brute force attacks if you want port 22 though. And, like you said, you can turn off user/pass logins and force public/private keys. Even that's not 100% (Debian bug not so long ago), but it's a LOT better. And it's so much better than HTTP digest auth that it's not really worth talking about. <br>
</div></div>