3 ms·
I wouldn't trust this for security reasons. You're relying on the "allow everything except for what I thought of to lock down that an attacker might do" princip
by rlpb 16y ago
I wouldn't trust this for security reasons. You're relying on the "allow everything except for what I thought of to lock down that an attacker might do" principle, instead of the "deny everything except what I explicitly allow" security principle.
For example: in addition to allowing you to tunnel into your stolen laptop, you're also giving the thief permission (and the key) to use your server as a proxy.
ssh can be locked down further than in your instructions, but I wouldn't rely on it.