Re: checking if my system is compromised
On Sat, Apr 07, 2007 at 06:41:22PM -0700, Kamaraju Kusumanchi wrote:
> Turns out that I was dictionary attacked (thanks to
> /var/log/auth.log) via ssh port. The intruder was able to gain access
> to the guest account.
The fail2ban package can be helpful in fighting dictionary attacks.
dt
--
Dave Thayer | Whenever you read a good book, it's like the
Denver, Colorado USA | author is right there, in the room talking to
dave@thayer-boyle.com | you, which is why I don't like to read
| good books. - Jack Handey "Deep Thoughts"
Reply to: