On Tue, 8 Mar 2005 19:02:34 +0530, Ravi Kumar <[EMAIL PROTECTED]> wrote:
> Maybe using tcpwrappers to block your ssh to all except your
> internal network might be helpful.
> Just add the following line to your /etc/hosts.deny file :
> sshd : ALL EXCEPT LOCAL, 192.168.0.0/255.255.255.0
Correct me if I am wrong, but won't this only work if sshd is being
launched through inetd instead of as a daemon?
> On the other hand, you can use IPtables to deny access to such
> intruders by first using a default policy of DROP:
> # iptables -P INPUT DROP
> And then only allowing those that you really need to give access to.
This is probably a better solution.
Thaths
--
"You don't quit your job because you don't like it, you just go in and do it
really half-assed." -- Homer J. Simpson
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
linux-india-help mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/linux-india-help
