On Thu, 11 Jan 2024, Russell Senior wrote:

TL;DR, this is using password guessing. Solution: use better passwords or turn off passwords altogether and use ssh authorized_keys.

Or, if some local operations rely on passwords but you want remote users to use keys instead, then add a Host stanza to sshd_config, e.g.,

# most of sshd_config here, then at the end, altering the
# cidr block as necessary
PasswordAuthentication no
PermitRootLogin no
Match Address 192.168.30.0/24
  PasswordAuthentication yes
  PermitRootLogin yes

--
Paul Heinlein
heinl...@madboa.com
45°22'48" N, 122°35'36" W

Reply via email to