Re: On defense of the sshd crackers

[Raquel <raquel@thericehouse.net>]

On Tue, 09 Oct 2007 10:56:20 -0400
Kamaraju S Kusumanchi <kamaraju@bluebottle.com> wrote:

> T o n g wrote:
> 
> > [The is a security configuration question. Let me try it here to
> > see if I can some valuable inputs before heading to newsgroup]
> 
> > What's your recommendation to such situation?
> > 
> 
> fail2ban seems to be the preferred solution. However, I just
> manually add the offending IP addresses to /etc/hosts.deny to
> prevent any future attacks from the same IPs.
> 
> hth
> raju
> -- 

This is a solution.  But, what about people who have dynamic IP
addresses?  Everyone from AOL gets blocked from accessing anything
on your server(s)?

-- 
Raquel
============================================================
Nothing will change until we demolish the we/they mentality. We are
human and therefore all human concerns are ours.
  --Sam Hamill