[gentoo-user] SSH + Keys

2006-03-08 Thread Timothy A. Holmes
Good Morning Folks: I have been doing some reading over the last day or two about a SSH bot attack that is occurring in some places. I will be the first to admit that I have been a bit lax with my ssh security (allowing root logins etc). This problem has inspired me to get things cleaned up,

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread John Jolet
On Mar 8, 2006, at 8:31 AM, Timothy A. Holmes wrote: Good Morning Folks: I have been doing some reading over the last day or two about a SSH bot attack that is occurring in some places. I will be the first to admit that I have been a bit lax with my ssh security (allowing root logins

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread Nagatoro
John Jolet wrote: this says for all hosts i ssh to, use port 26, and username john at the [...] I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I moved them to :) Missed something? :) -- Naga -- gentoo-user@gentoo.org

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread John Jolet
On Mar 8, 2006, at 9:02 AM, Nagatoro wrote: John Jolet wrote: this says for all hosts i ssh to, use port 26, and username john at the [...] I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I moved them to :) Missed

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread Etaoin Shrdlu
On Wednesday 08 March 2006 16:06, John Jolet wrote: is that a question or statement? What do you mean? You said: I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I moved them to :) but at the beginning of your message

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread A. Khattri
On Wed, 8 Mar 2006, John Jolet wrote: I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I moved them to :) I dont think moving ssh from port 22 will stop portscans but it will stop brute force attacks directly on port 22. I

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread John Jolet
On Mar 8, 2006, at 10:06 AM, Etaoin Shrdlu wrote: On Wednesday 08 March 2006 16:06, John Jolet wrote: is that a question or statement? What do you mean? You said: I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I

Re: [gentoo-user] SSH + Keys

2006-03-08 Thread John Jolet
On Mar 8, 2006, at 9:54 AM, A. Khattri wrote: On Wed, 8 Mar 2006, John Jolet wrote: I've had NO ssh portscans on my boxes since I moved them off of port 22. for security's sake, i won't tell you where I moved them to :) I dont think moving ssh from port 22 will stop portscans but it