Return-Path: Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: (qmail 96612 invoked from network); 3 Jan 2011 16:47:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 3 Jan 2011 16:47:12 -0000 Received: (qmail 79174 invoked by uid 500); 3 Jan 2011 16:47:11 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 78006 invoked by uid 500); 3 Jan 2011 16:47:07 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 77997 invoked by uid 99); 3 Jan 2011 16:47:07 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Jan 2011 16:47:07 +0000 X-ASF-Spam-Status: No, hits=0.7 required=10.0 tests=FREEMAIL_FROM,RFC_ABUSE_POST,SPF_NEUTRAL,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: 208.10.26.74 is neither permitted nor denied by domain of lesmikesell@gmail.com) Received: from [208.10.26.74] (HELO mailmx.futuresource.com) (208.10.26.74) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Jan 2011 16:46:59 +0000 Received: from ns4.futuresource.com ([208.10.26.50]) by mailmx.futuresource.com (8.13.8/8.13.8) with ESMTP id p03Gk6Lc010548 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 3 Jan 2011 10:46:07 -0600 Received: from [172.22.181.98] ([172.22.181.98]) by ns4.futuresource.com (8.13.8/8.13.8) with ESMTP id p03Gkaqc017383 for ; Mon, 3 Jan 2011 10:46:37 -0600 Message-ID: <4D21FD6D.2060505@gmail.com> Date: Mon, 03 Jan 2011 10:46:37 -0600 From: Les Mikesell User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: users@subversion.apache.org Subject: Re: Fine and secure dining, was Re: svnadmin create and not being method agnostic References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.70 on 208.10.26.74 X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-3.0 (mailmx.futuresource.com [208.10.26.74]); Mon, 03 Jan 2011 10:46:07 -0600 (CST) On 1/2/2011 9:43 PM, Nico Kadel-Garcia wrote: > > It's possible to do secure Subversion. Use svn+ssh access, disable or > block other services at the firewall, If ssh is permitted and you didn't personally set it up, what are the odds that port tunneling or ssh's built in socks proxy will allow access to every service behind the firewall? -- Les Mikesell lesmikesell@gmail.com