[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

default firewall/IDS that comes with DEBIAN



All

Another newbiew question...

While browsing my auth.log file, I notice 'many' denial attacks.

Eg:...

Dec 17 12:25:37 h-66-166-247-242 sshd[21409]: Illegal user sara from 61.82.25.83
Dec 17 12:25:39 h-66-166-247-242 sshd[21412]: Illegal user robert from 61.82.25.83
Dec 17 12:25:41 h-66-166-247-242 sshd[21415]: Illegal user richard from 61.82.25.83
Dec 17 12:25:43 h-66-166-247-242 sshd[21418]: Illegal user party from 61.82.25.83
Dec 17 12:25:45 h-66-166-247-242 sshd[21420]: Illegal user amanda from 61.82.25.83
Dec 17 12:25:46 h-66-166-247-242 sshd[21423]: Illegal user rpm from 61.82.25.83
Dec 17 12:25:48 h-66-166-247-242 sshd[21426]: Illegal user operator from 61.82.25.83
Dec 17 12:25:50 h-66-166-247-242 sshd[21428]: Illegal user sgi from 61.82.25.83
Dec 17 12:25:54 h-66-166-247-242 sshd[21434]: Illegal user users from 61.82.25.83
Dec 17 12:25:56 h-66-166-247-242 sshd[21437]: Illegal user admins from 61.82.25.83
Dec 17 12:25:58 h-66-166-247-242 sshd[21439]: Illegal user admins from 61.82.25.83
Dec 17 12:26:08 h-66-166-247-242 sshd[21453]: Illegal user shutdown from 61.82.25.83

What default firewall/IDS does Debian come with following an initial install?

Note: during install I selected all major components and did not include any additional packages wile installer was running aptitude.

Thx Attila



Reply to: