===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/anoncvs.html,v
retrieving revision 1.158
retrieving revision 1.159
diff -c -r1.158 -r1.159
*** www/anoncvs.html	2001/09/26 07:31:49	1.158
--- www/anoncvs.html	2001/10/14 15:35:28	1.159
***************
*** 178,194 ****
  </dl>
  
  <p>
! <b>NOTE:</b> For users wishing to use ssh, you must first set the
! <var>CVS_RSH</var> variable to ssh.
  
  <ul>
  <li>For Korn/Bourne shells:
  <pre>
! 	$ <b>export CVS_RSH=/usr/bin/ssh</b>
  </pre>
  <li>For csh/tcsh:
  <pre>
! 	% <b>setenv CVS_RSH /usr/bin/ssh</b>
  </pre>
  </ul>
  
--- 178,194 ----
  </dl>
  
  <p>
! <b>NOTE:</b> For users wishing to use rsh, you must first set the
! <var>CVS_RSH</var> variable to rsh.
  
  <ul>
  <li>For Korn/Bourne shells:
  <pre>
! 	$ <b>export CVS_RSH=/usr/bin/rsh</b>
  </pre>
  <li>For csh/tcsh:
  <pre>
! 	% <b>setenv CVS_RSH /usr/bin/rsh</b>
  </pre>
  </ul>
  
***************
*** 242,248 ****
  set your <var>CVSROOT</var> environment variable to one of
  the following values:
  <p>
! <em>Please see the note about using ssh vs. rsh below!</em>
  <p>
  <ul>
  <li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
--- 242,248 ----
  set your <var>CVSROOT</var> environment variable to one of
  the following values:
  <p>
! <em>Please see the note about <a href="#WHICH">ssh vs. rsh</a> below!</em>
  <p>
  <ul>
  <li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
***************
*** 709,739 ****
  <h3><a name="WHICH"><font color="#0000e0">Use rsh(1) or ssh(1)?</font></a></h3>
  
  <p>
! <strong>Anoncvs: rsh vs. ssh</strong>
! <br>
! By default, the CVS client uses rsh to talk to the CVS server.  Many
! of the CVS sites no longer support rsh for security reasons or a local
! problem like a firewall or imperfect protocol emulator such as slirp
! may prevent you from using rsh.
! The alternative is a to use a "secure shell" connection using
! <a href="http://www.openssh.com/">OpenSSH</a>.
  
  <p>
! Once ssh is installed, one sets the environment variable
! <var>CVS_RSH</var> to point to ssh (typically
! <strong>/usr/bin/ssh</strong>).  If your local site prevents you
! from connecting out to port 22 (which ssh defaults to using) use port
! 2022.  
  
  <p>
! Do not be tempted to turn on compression since CVS already compresses.
! Use something like the following in your <strong>$HOME/.ssh/config</strong>
! file.  Note that not all anoncvs servers allow ssh connections on
! port 2022.  Also note that most anoncvs servers no longer accept
! the <strong>none</strong> cipher as it is disabled in recent
! versions of ssh for security reasons.
  <pre>
  	Host anoncvs.ca.openbsd.org
  	    Port 2022
  </pre>
  
--- 709,739 ----
  <h3><a name="WHICH"><font color="#0000e0">Use rsh(1) or ssh(1)?</font></a></h3>
  
  <p>
! By default, the CVS client uses ssh ("secure shell":
! <a href="http://www.openssh.com/">OpenSSH</a>) to talk to the CVS server.
  
  <p>
! Many of the CVS sites no longer support rsh for security reasons.  Local
! problems like firewalls or imperfect protocol emulators such as slirp may
! also hinder rsh usage.  However, if rsh is desired, one must set the
! <var>CVS_RSH</var> environment variable to point to rsh
! (typically <strong>/usr/bin/rsh</strong>).
  
  <p>
! If local policy prevents outgoing connections to ssh's default port of 22,
! port 2022 may be used in its place.  Note, however, that not all anoncvs
! servers accept ssh connections on this port.  Furthermore, most anoncvs servers
! no longer accept the <strong>none</strong> cipher, as it is disabled in
! recent versions of ssh for sercurity reasons.  Also, do not be tempted
! to turn on compression: CVS already compresses.
! 
! <p>
! One could specify something like the following in the
! <strong>$HOME/.ssh/config</strong> configuration file to avoid the pitfalls
! and restrictions mentioned above:
  <pre>
  	Host anoncvs.ca.openbsd.org
+ 	    Compression no
  	    Port 2022
  </pre>
  
***************
*** 799,805 ****
  <a href="index.html"><img height="24" width="24" src="back.gif" border="0" 
  alt="OpenBSD"></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: anoncvs.html,v 1.158 2001/09/26 07:31:49 miod Exp $
  </small>
  
  </body>
--- 799,805 ----
  <a href="index.html"><img height="24" width="24" src="back.gif" border="0" 
  alt="OpenBSD"></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: anoncvs.html,v 1.159 2001/10/14 15:35:28 jcs Exp $
  </small>
  
  </body>