On August 31, 2004 08:26 am, Andrew Graupe wrote:
> People are trying to login via SSH as root or admin, and failing (thank
> God).  I have changed my firewall temporarily to only allow SSH from my
> private subnet.  I would ideally like to change this.  What can I do?
>
> I don't *think* anyone has broken in yet, but I can't be sure.

Set PermitRootLogin to no in /etc/ssh/sshd_config

if you need root, log in as you and su. This way an attacker has to guess a 
login and a password, instead of guessing just a password for root (which 
almost always exists).

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca

Reply via email to