RE: cfengine, firewall and security

[Dan Bethe]

--- Patrice GUERLAIS <patrice.guerlais@echo.fr> wrote:
> Thanks Mark, but it doesn't really solve my problem.
> 
> What I want to do is to keep all my reference files and configuration
> scripts on a server protected behind the firewall, and then
> "push" all those things from that server to the clients. The clients

        If you have your server push the data, especially over
RSA-authenticated SSH, over a firewall that allows them to see out but
for nobody to see in, then you should be as secure as anything.  I'd
put a firewall on each external host as well.

=====
"Don't expect your own messiah; this neverworld which you desire is
only in your mind." -- http://www.dreamtheater.net/songb4.htm#IV5

__________________________________________________
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one Place.
http://shopping.yahoo.com/