To remote sync I have to open up the port 8007 on the internet which is the management GUI. This shows lot of information what is service running at this port, which is a security risk. Also it possible to restrict users like root@pam to only the local net? For the internal management form LAN, passwords often not that long (so that they can be typed by humans), which form the internet these passwords are too weak.
I would like to have a special remote sync user, with a very strong password, which can do nothing by remote syncs and can access the server over the internet. The others users, specially root@pam should not be able to connect from the internet, only from LAN.
Another solution which be to open up an SSH tunnel to the remote site forwarding local port 8008 (because 8007 is already used by the local PBS) to the remote server 8007, and then point the remote sync to localhost:8008. Unfortunately I didn't find the option the change the remote port.
I would like to have a special remote sync user, with a very strong password, which can do nothing by remote syncs and can access the server over the internet. The others users, specially root@pam should not be able to connect from the internet, only from LAN.
Another solution which be to open up an SSH tunnel to the remote site forwarding local port 8008 (because 8007 is already used by the local PBS) to the remote server 8007, and then point the remote sync to localhost:8008. Unfortunately I didn't find the option the change the remote port.
