Re: SSH Blocking

[Radu Brumariu <brum76@gmail.com>]

Hi,

>There are, but it may be simpler to change the port that SSH listens on.
>  
>

Which method is that ( blocking the offending IP from SSHD's
configuration ) ?

>The behaviour you're seeing is likely not actually "people", but an
>automated scan of some sort.  Changing SSH port is 'really' more secure
>(obscurity and all that), but it's an extra layer and, if nothing else,
>stops your logs getting cluttered with all the failed logins ...
>  
>

If they are doing a portscan on your machine + service fingerprinting,
that doesn't help that much. Of course it will hide it for a while, but
every time you connect to the machine you will have to put in the port
number...which tends to be a hassle.


>Dave.
>  
>
-- 
"Stat rosa pristina nomine, nomina nuda tenemus"