Re: brute force ssh login attempts and how to Disrupt them

2006-11-19 Thread Michelle Konzack
Am 2006-11-16 23:26:34, schrieb Hans du Plooy: > On Thu, 2006-11-16 at 06:25 -0600, Martin McCormick wrote: > > I haven't created anything similar for Linux yet or I > > would be happy to let folks try it out. > > http://denyhosts.sourceforge.net/ Should sort it out. > > In addition it's alw

RE: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread Debeselis
force ssh login attempts and how to Disrupt them > > Martin McCormick <[EMAIL PROTECTED]>: > > One day, I noticed one of those attacks starting. What > > Much simpler: > > % /etc/init.d/ssh stop > > sshd is only necessary to ssh *in* to the box. If you

Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread s. keeling
Martin McCormick <[EMAIL PROTECTED]>: > One day, I noticed one of those attacks starting. What Much simpler: % /etc/init.d/ssh stop sshd is only necessary to ssh *in* to the box. If you've so far managed to remain ignorant of the sshd attacks going on, you might need to reconsider wh

Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread David Hart
On Thu, Nov 16, 2006 at 23:26:34 +0200, Hans du Plooy wrote: > > If you ssh in from a static IP, you can always just put an iptable rule > in to allow ssh connections only from your IP. Unfortunately I'm on > dynamic, so I can't do that. You can use knockd to open a port to allow access from a d

Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread John L Fjellstad
In Linux, you can use iptables with the recent module. -- John L. Fjellstad web: http://www.fjellstad.org/ Quis custodiet ipsos custodes -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread Hans du Plooy
On Thu, 2006-11-16 at 06:25 -0600, Martin McCormick wrote: > I haven't created anything similar for Linux yet or I > would be happy to let folks try it out. http://denyhosts.sourceforge.net/ Should sort it out. In addition it's always a good idea to disable root login. One one server that

Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread martin f krafft
also sprach Martin McCormick <[EMAIL PROTECTED]> [2006.11.16.1325 +0100]: > I haven't created anything similar for Linux yet or I > would be happy to let folks try it out. Check out the fail2ban package. -- Please do not send copies of list mail to me; I read the list! .''`. martin f.