[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSH Slams



Russ Price wrote:
> Bob Proulx wrote:
> >Personally I would just ignore it in the logs.
> 
> The log floods get annoying after a while, so I'm using the ipt_recent 
> module (CONFIG_IP_NF_MATCH_RECENT) to rate-limit incoming attempts to 
> port 22 - more than three times in 60 seconds results in a 60-second ban 
> from the source IP to that port.  A nice startup script that can be used 
> as a starting point can be found at:
> 
> <http://www.linode.com/forums/viewtopic.php?p=6935#6935>

A nice reference.  Thanks for sharing that.

> I also have switched to using public key authentication exclusively, so 
> password guessers won't work anyway.

Me too.

Bob

Attachment: signature.asc
Description: Digital signature


Reply to: