Re: SSH attack

To: Debian User Group <debian-user@lists.debian.org>
Subject: Re: SSH attack
From: Dick Davies <rasputnik@gmail.com>
Date: Tue, 15 Nov 2005 20:02:16 +0000
Message-id: <[🔎] 3f1760511151202t6351ce86n@mail.gmail.com>
In-reply-to: <[🔎] E963A8D6-4F34-4760-9DCE-DB7BC92075AF@dogstar-interactive.com>
References: <547e6a320510022257h16636051l1c2ce306d0cb0963@mail.gmail.com> <[🔎] E963A8D6-4F34-4760-9DCE-DB7BC92075AF@dogstar-interactive.com>

On Oct 3, 2005, at 1:57 AM, Jared Hall wrote:

> > It looks like I am being rooted right now.  How do I toss this guy off
> > of my system.  [...snip...] I
> > can't shut down ssh because that's my only connection to the system.

It's probably not going to help now, but fireHOL
(frontend to iptables) has a nice feature.

If you run 'firehol panic' it shuts down all traffic to the box *except* the ssh
session you ran the command from.

--
Rasputin :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/

Reply to:

References:
- Re: SSH attack
  - From: Rich Johnson <rjohnson@dogstar-interactive.com>

Prev by Date: Re: Imap
Next by Date: IMAP and Sieve
Previous by thread: Re: SSH attack
Next by thread: Re: SSH attack
Index(es):
- Date
- Thread