[jwhat]

Hi gmcenroe,

no way in the world would I put any IRIX machine directly on the internet.

Also no way would I expose any application running on IRIX on the internet (via port forwarding, firewall or some other means).

Example is I recently put IRIX man pages up on a server, via mostly static pages, as there was no way I would expose IRIX Infosearch via internet....

Nowadays, it is no longer just ip address/port protection (which is what most "firewalls" provide), it is about securing the application behind the ip address/ports from application injection and buffer overruns and other hacking tactics.

Hence why security patches are being delivered daily across applications and OS.

To protect any internet facing systems you need to run regular scans on your network.

One of the most commonly used scanning tools was OpenVAS which morped into Greenbone Vulnerability Management and is readily available as part Kali Linux distribution, which is focused on providing security vulnerability tools.

Whether you use: Juniper, Cisco, Linux, BSD, Fortinet... or any other of the thousands of network router/security options, do not trust it blindly, run scans.

And if you want to access your SGI device remotely, then setup VPN, rather than exposing SSH to internet.

Cheers from Oz,

jwhat/John,