Giovanni Di Stasi wrote:
>
> So,
> would you implement a server to give a few services (dns, webserver, dhcp,
> etc.) putting each of these services in a different vserver, just to have a
> system more secure?
>
Yes - this is normal practice.
Also it's a piece of cake to copy the vserver to backup before testing
some new config
> What do you think about having a ssh server in each vserver and not in the
> main context? Is this setup more secure?
>
This is normal, however watch out for the ssh in the host nabbing all
the IPs - set it to run only on the host ips in the config
Ed W
Received on Thu May 15 23:28:55 2008