You could apply a filter on your loopback interface (RE filter) that only allows SSH from specific destinations.
Ken -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ying Zhang Sent: Wednesday, February 20, 2008 1:15 PM To: [email protected] Subject: [j-nsp] SSH attack Hello, all, On our Juniper router, we constantly see people trying to connect through SSH. I've tried everything I can find to eliminate it. The following is what I've done so far. Just wondering if there is a better way to stop it on the router (we do block port ssh on every link). Thanks in advance. root-login deny; protocol-version v2; connection-limit 5; rate-limit 1; retry-options { tries-before-disconnect 2; backoff-threshold 2; backoff-factor 10; minimum-time 20; } C _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
