There's a much better way to protect yourself. Install a firewall and
deny access to that ip address. More than that, if you are on a static
IP when you connect (or more, but known addresses) simply deny from all
ip and allow ssh port only to those that you can trust (yours). Even
more, change the ssh server port to something very different.
If you are not familiar with firewalls you could install webmin (emerge
webmin) and do it from there, eventually via shorewall (emerge
shorewall). Don't forget to secure the webmin server as well (same as
for sshd) after your firewall is up and running.
Also, be very carefull when installing the firewall for the first time
if you don't have phisical access to the server. You don't want to lock
yourself out by mistake. Eventually you could not add your firewall to
your startup list until you are sure it's all ok and if you accidentally
mess up you can call your provider and ask for a reboot ;)
I am surfing here, and I got far from the subject. Let us know if it
helps.
Radu

-----Original Message-----
From: Claudinei Matos [mailto:[EMAIL PROTECTED] 
Sent: 6 mai 2005 19:47
To: [email protected]
Subject: [gentoo-server] sshd (many connection attempts with invalid
user)


Hi,

I have a lot of connection attempts in my ssh server. I've take a look
at sshd_config man pages but I didn't found a way to deny the source
ip of the attempts by 5 minutes (i.e.) if this ip can't login after 5
attempts (i.e.). Is there a way to do this?

Tks,

Claudinei Matos

-- 
[email protected] mailing list


-- 
[email protected] mailing list

Reply via email to