Subject: Re: [vserver] vserver security
From: Ed W <lists@wildgooses.com>
Date: Thu, 15 May 2008 23:28:44 +0100

Giovanni Di Stasi wrote:
>
> So,
> would you implement a server to give a few services (dns, webserver, dhcp, 
> etc.) putting each of these services in a different vserver, just to have a 
> system more secure?
>   

Yes - this is normal practice.

Also it's a piece of cake to copy the vserver to backup before testing 
some new config

> What do you think about having a ssh server in each vserver and not in the 
> main context? Is this setup more secure?
>   

This is normal, however watch out for the ssh in the host nabbing all 
the IPs - set it to run only on the host ips in the config

Ed W