RE: brute force ssh login attempts and how to Disrupt them
I think that the best solution in this situation would be knockd daemon.
> -----Original Message-----
> From: robomod@news.nic.it [mailto:robomod@news.nic.it] On Behalf Of s. keeling
> Sent: Friday, November 17, 2006 7:50 AM
> To: debian-user@lists.debian.org
> Subject: Re: brute force ssh login attempts and how to Disrupt them
>
> Martin McCormick <martin@dc.cis.okstate.edu>:
> > One day, I noticed one of those attacks starting. What
>
> Much simpler:
>
> % /etc/init.d/ssh stop
>
> sshd is only necessary to ssh *in* to the box. If you've so far
> managed to remain ignorant of the sshd attacks going on, you might
> need to reconsider whether you ought to be running sshd at all. This
> is not new News.
>
Reply to: