I agree. I use an obscure port for ssh as well as only allow key-based auth (PasswordAuthentication is disabled). I have not have any attempts on my boxes.
On Sun, 2005-10-02 at 23:37 +0200, Hemmann, Volker Armin wrote: > On Sunday 02 October 2005 23:10, Jeremy Brake wrote: > > Hey all, > > > > I'm looking for an app/script which can monitor for failed ssh logins, > > and block using IPTables for $time after $number of failed logins (an > > exclusion list would be handy as well) so that I can put a quick stop to > > these niggly brute-force ssh "attacks" I seem to be getting more and > > more often. > > > > Anyone have any ideas? > > > > Thanks, Jeremy B > > and what do you do, if they spoof your gateway/router/nameservers ip? > If you use key-based authentifiction, you shouldn't have to fear brute-force > attemps... and as the others wrote, changing the port, may also help a bit. -- [email protected] mailing list
