Re: Blocking ssh

[Arnt Karlsen <arnt@c2i.net>]

On Mon, 13 Jun 2005 10:40:23 +0200, Simon wrote in message 
<[🔎] 87psuq7iq0.fsf@hp-factory.de>:

> 
> Hi
> 
> "R. W. Rodolico" <stargazer@dailydata.net> writes:
> > I'm getting quite a few cracking attempts through ssh, most recently
> > from some Korean site. I have three people who are allowed ssh
> > access, but two additonal ones are able to make webmin connections
> > (https to port 10000). Unfortunately, all of them come in from
> > dynamic IP's.
> > 
> > Any other suggestions are very appreciated.

..ban _everything_, then decide which PHB whine 
you wanna _consider_ listening to.

> Use ssh with keys and disable password auth.  I think there's even a
> way to do key-based user auth on https, but i'm not sure...

..also possible to wrap that too in key based ssh.  
And, that again, in pretty http picture traffic etc.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;o)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.