[Gllug] limiting ssh zombie login attempts

[Sean Burlington]

Ben Fitzgerald wrote:
> Hi,
> 
> We have an internet facing server that has been receiving an
> increasing number of attempts to guess username/passwords.
> 
> This is, at the moment, just annoying. I'd like to see that it
> gets no worse by installing something like portsentry to
> dynamically manage /etc/hosts.deny.
> 
> Is this the best package for linux, or have others come to the
> fore that are worth trying?
> 
> Thanks,
> 

personally I changed my ssh setup to only disallow password connections

spoof attacks can trick port sentry into denying access from/to 
arbitrary ip addresses ...

-- 

Sean

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug