-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Friday, 15.10.2004 at 17:53 -0400, Jay Libove wrote:
> What are you doing/changing about your SSH configurations to reduce > the possibility of these attacks finding any kind of hole in the > OpenSSH software (that's what I run, so that's the only version I'm > particularly concerned about) ? Are you doing anything at all? Attacks on my system seemed to be restricted to root, so I set the 'PermitRootLogin without-password' option, so that no root logins using a password were possible - must be RSA key. I also switched to non-standard port. Dave. - -- Dave Ewart [EMAIL PROTECTED] Computing Manager, Epidemiology Unit, Oxford Cancer Research UK PGP: CC70 1883 BD92 E665 B840 118B 6E94 2CFD 694D E370 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBc41nbpQs/WlN43ARAo+CAJ93kn9R5ofmHKS/IHvTno993NjI/ACfS2+f BrO9xzfyhjkKYTvsycUUN88= =m1XQ -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
