I made a few notes about securing SSH here: http://www.sonoracomm.com/index.php?option=com_content&task=view&id=32&Itemid=32
But this was only an attempt to balance the desire for more security with easy SSH access and easy implementation. This may not apply perfectly to ASTlinux, but maybe it will point you in the right direction. BTW, there were LOTS or resources on the 'net about securing SSH. IMO, most SSH installations are not at much risk unless a very simple password is used to gain access. If you are not a high-profile target, it is fairly easy to thwart the script-kiddies as they are primarily looking for low-hanging fruit. HTH, G Roel Cuppen wrote: > Hi, > > I would like to secure ssh access on astlunix. > I've open ssh access from the internet. > Currently i use ssh public key authentication, so it's quite secure. > Sometimes I change the ssh port(22) to another one. > > The mean reason why i would like to secure ssh, is about 'brute force' / > password attacks. > > With tcp wrappers it's possible to use denyhosts or some other scripts. > But I read many messages of compiling tcp wrappers in uclibc. > It seems to be hard to get tcp wrappers working. > I've already tried to compile sshd with the folowing configure syntax. > --with-libwrap=/path-to-libwrap.a/ > With no success.... > > Can anyone explain why its hard to compile tcp wrappers ? > Maybe anyone has done it before ? > > I'm no developer. > The astlinux development enviroment (buildroot) is the only one I've ever > used. > > Maybe there is another way to secure ssh ? > > Grts Roel > > _______________________________________________ > Astlinux-users mailing list > [email protected] > http://lists.kriscompanies.com/mailman/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to [EMAIL > PROTECTED] -- ============================= Gene Cooper Sonora Communications, Inc. 5531 N. Oracle Road Tucson, AZ 85704 (520) 293-8461 x101 (520) 888-4060 fax [EMAIL PROTECTED] _______________________________________________ Astlinux-users mailing list [email protected] http://lists.kriscompanies.com/mailman/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to [EMAIL PROTECTED]
