Re: default firewall/IDS that comes with DEBIAN

[Paul Johnson <baloo@ursine.ca>]

mutsuura wrote:

> While browsing my auth.log file, I notice 'many' denial attacks.
> 
> Eg:...
> 
> Dec 17 12:25:37 h-66-166-247-242 sshd[21409]: Illegal user sara from
> 61.82.25.83 Dec 17 12:25:39 h-66-166-247-242 sshd[21412]: Illegal user
> robert from 61.82.25.83 Dec 17 12:25:41 h-66-166-247-242 sshd[21415]:
> Illegal user richard from 61.82.25.83 Dec 17 12:25:43 h-66-166-247-242
> sshd[21418]: Illegal user party from 61.82.25.83 Dec 17 12:25:45
> h-66-166-247-242 sshd[21420]: Illegal user amanda from 61.82.25.83 Dec 17
> 12:25:46 h-66-166-247-242 sshd[21423]: Illegal user rpm from 61.82.25.83
> Dec 17 12:25:48 h-66-166-247-242 sshd[21426]: Illegal user operator from
> 61.82.25.83 Dec 17 12:25:50 h-66-166-247-242 sshd[21428]: Illegal user sgi
> from 61.82.25.83 Dec 17 12:25:54 h-66-166-247-242 sshd[21434]: Illegal
> user users from 61.82.25.83 Dec 17 12:25:56 h-66-166-247-242 sshd[21437]:
> Illegal user admins from 61.82.25.83 Dec 17 12:25:58 h-66-166-247-242
> sshd[21439]: Illegal user admins from 61.82.25.83 Dec 17 12:26:08
> h-66-166-247-242 sshd[21453]: Illegal user shutdown from 61.82.25.83

So use strong passwords, and report abuse.

> What default firewall/IDS does Debian come with following an
> initial install?

Personal firewalls are snake oil.  Linux and good user practices are their
own firewall.