Re: On defense of the sshd crackers
T o n g wrote:
> [The is a security configuration question. Let me try it here to see if I
> can some valuable inputs before heading to newsgroup]
> What's your recommendation to such situation?
>
fail2ban seems to be the preferred solution. However, I just manually add
the offending IP addresses to /etc/hosts.deny to prevent any future attacks
from the same IPs.
hth
raju
--
Kamaraju S Kusumanchi
http://www.people.cornell.edu/pages/kk288/
http://malayamaarutham.blogspot.com/
Reply to: