On Wed, Feb 20, 2008 at 04:15:04PM -0400, Ying Zhang wrote:
> Hello, all,
> 
> On our Juniper router, we constantly see people trying to connect through 
> SSH. I've tried everything I can find to eliminate it. The following is what 
> I've done so far. Just wondering if there is a better way to stop it on the 
> router (we do block port ssh on every link). Thanks in advance.

        if you apply a firewall filter to lo0 that blocks tcp/22 from anywhere
but trusted ip ranges that will do what you want.  That will block on all
interfaces.

        - Jared

-- 
Jared Mauch  | pgp key available via finger from [EMAIL PROTECTED]
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to