[Gllug] limiting ssh zombie login attempts

Ben Fitzgerald ben_m_f at yahoo.co.uk
Tue Oct 19 08:48:48 UTC 2004


On Tue, Oct 19, 2004 at 09:12:51AM +0100, Sean Burlington wrote:
> Ben Fitzgerald wrote:
<snip>
> 
> personally I changed my ssh setup to only disallow password connections
> 
> spoof attacks can trick port sentry into denying access from/to 
> arbitrary ip addresses ...

I did consider this but didn't want to loose the convenience of being
able to log in from an arbitary address (e.g. an adhoc login from an
internet cafe). I guess I may have to compromise on the side of
security, thought :(

Is there no-one out there using something like portsentry who is happy
with it?

Ben
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list