On August 31, 2004 08:26 am, Andrew Graupe wrote: > People are trying to login via SSH as root or admin, and failing (thank > God). I have changed my firewall temporarily to only allow SSH from my > private subnet. I would ideally like to change this. What can I do? > > I don't *think* anyone has broken in yet, but I can't be sure.
Set PermitRootLogin to no in /etc/ssh/sshd_config if you need root, log in as you and su. This way an attacker has to guess a login and a password, instead of guessing just a password for root (which almost always exists). _______________________________________________ clug-talk mailing list [EMAIL PROTECTED] http://clug.ca/mailman/listinfo/clug-talk_clug.ca

