UPDATE: PLEASE NOTE these changes were made effective Feb-14 @ ~2:10pm. TDC performed basic connectivity testing and the new rules seem to be in place now.

Effective ~noon on Wednesday, Feb.14th, a number of simple changes will take effect to reduce exposure of POLAN servers and workstations to threats posed by unauthorized users on "the internet at large".

• Inbound SSH from VPN Clients will be unrestricted
• Inbound SSH from "the universe at large" will be restricted, only permitting access to ANCHOR plus one other server (not named here, but for use by a specific research group)

Anyone who needs remote access who does NOT have VPN access should be able to connect to anchor as a "gateway" and then from there, SSH to any other system in POLAN.

Anyone who has a valid Banner ID (i.e., current Faculty, Staff, or Student - basically) is eligible to use the Dalhousie VPN client software. The software is available for download from the URL, http://ucis.dal.ca/services/computer_services/downloads/vpn.html .

There may be further revisions to SSH access into POLAN in the future, at which time additional consultation will take place before new changes are proposed or implemented.

As always, if you have any concerns or problems with this, please contact Tim Chipman.