[cumbria_lug] Preventing SSH attacks

[euan.hogg at cumbria.ac.uk]

Hi,

Has anyone tested how running nmap twice against the target machine holds 
up?

--
Euan Hogg
ICT Systems Administrator
Cumbria Institute of the Arts

Brampton Road
Carlisle
Cumbria
CA3 9AY

Tel: (01228) 400300




Steve <Steve at fadges.demon.co.uk> 
Sent by: cumbria-bounces at mailman.lug.org.uk
20/01/2005 16:36
Please respond to
Cumbria LUG <cumbria at mailman.lug.org.uk>


To
Cumbria LUG <cumbria at mailman.lug.org.uk>
cc

Subject
Re: [cumbria_lug] Preventing SSH attacks






Schwuk wrote:
> Seeing as we have at least one firewall expert on here...
> 
> I've found a technique for preventing the common SSH login attack (which
> my web server suffers from), and wondered what people thought of it
> before I tried implementing it.
> 
> http://www.soloport.com/iptables.html
> 


I'm intreagued by the module.  If you try it, I'd be very interested to 
hear how it goes.  On the outside, it seems like a smart idea.. [prod 
port to open other] [access SSH] [prod port to stop new SSH connections] 
[continue with existing session]


_______________________________________________
Cumbria mailing list
Cumbria at mailman.lug.org.uk
http://mailman.lug.org.uk/mailman/listinfo/cumbria
http://www.cumbria.lug.org.uk