Connecting to Linstat from Outside the Madison Area

While all computers are subject to regular attacks today, Linux servers draw particular attention. These attacks come from all over the world, and it is very rare for them to originate in the Madison area. SSCC therefore blocks standard Secure Shell (ssh) connections to Linstat from outside the Madison area. This vastly reduces the number of attacks Linstat is subjected to, but SSCC members can still connect to Linstat from anywhere in the world using one of the following easy methods:

• Connect to the SSCC network using VPN before logging into Linstat. This is perhaps the simplest method. Recall that you must connect to the SSCC network to run X-Win32 anyway.
• First log into Winstat and then connect to Linstat from within your Winstat session. This is also very simple, and also gives you access to all the software on Winstat. However it uses one of our Winstat licenses, so if you only need Linstat we suggest using VPN instead.
• Use the Google Authenticator app on your smartphone to obtain a code you then enter while logging in. This method requires more configuration, but may give somewhat better performance.
• Create a pair of encryption keys that are stored on Linstat and your computer which can then be used to connect to Linstat from that specific computer. This method also requires more configuration but may give somewhat better performance.

You only need to use one of these four methods. Note that the Google Authenticator and key pair methods must be set up while you are connected to Linstat. If you will be traveling and want to use these methods, we suggest configuring them before you leave. Otherwise you'll need to connect using VPN or Winstat once to set them up.

SSCC staff have used information provided by local Internet Service Providers to identify the IP address ranges used in the Madison area. Our intent is to define "Madison area" broadly, but contact the help desk if you find you are unexpectedly being treated as "outside the Madison area."

Last Revised: 5/15/2014