Just saw in my logs a couple of the password-guessing ssh bots were making attempts at the clamav user's password. Everyone please make sure you have locked this account!

(Sorry to bother all of you for whom this is common sense, but I'm sure it'll wake up someone on this list. Oh, and please don't go onto some OT thread about running ssh on some high-numbered port, or disabling password auth, or using port-knocking.)

Damian Menscher
--
-=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Ofc:(650)253-2757 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to