Re: How do I prevent unauthorized ssh login attempts?

2007-04-27 Thread Peter N. M. Hansteen
Andreas Wider?e Andersen [EMAIL PROTECTED] writes: How can I stop these attempts or block them - or even recognize them? I do not have IPF installed. There are several packages which could help, the one I prefer is a simple pf rule set which tracks the number of connection attempts per time

How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Andreas Widerøe Andersen
I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output: myserver.domain.com login failures: Apr 25 20:00:19 myserver sshd[57810]: Invalid user staff from 65.171.74.26 Apr 25

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Beech Rintoul
On Thursday 26 April 2007, Andreas Widerøe Andersen said: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output: myserver.domain.com login failures: Apr 25 20:00:19

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Andreas Widerøe Andersen
On 4/26/07, Arek Czereszewski [EMAIL PROTECTED] wrote: Andreas Widerøe Andersen wrote: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output: [...] Run sshd on other

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Pietro Cerutti
On 4/26/07, Andreas Widerøe Andersen [EMAIL PROTECTED] wrote: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output: myserver.domain.com login failures: Apr 25 20:00:19

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Pietro Cerutti
On 4/26/07, Andreas Widerøe Andersen [EMAIL PROTECTED] wrote: On 4/26/07, Arek Czereszewski [EMAIL PROTECTED] wrote: Andreas Widerøe Andersen wrote: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Duane Hill
On Thu, 26 Apr 2007, Pietro Cerutti wrote: On 4/26/07, Andreas Wider??e Andersen [EMAIL PROTECTED] wrote: On 4/26/07, Arek Czereszewski [EMAIL PROTECTED] wrote: Andreas Wider??e Andersen wrote: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Andreas Widerøe Andersen
On 4/26/07, Duane Hill [EMAIL PROTECTED] wrote: On Thu, 26 Apr 2007, Pietro Cerutti wrote: On 4/26/07, Andreas Widerøe Andersen [EMAIL PROTECTED] wrote: On 4/26/07, Arek Czereszewski [EMAIL PROTECTED] wrote: Andreas Widerøe Andersen wrote: I'm getting a lot of unauthorized ssh login

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Bill Moran
In response to Andreas Widerøe Andersen [EMAIL PROTECTED]: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output: myserver.domain.com login failures: Apr 25 20:00:19

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Kevin Hunter
At 8:34a -0400 on 26 Apr 2007, Bill Moran wrote: In response to Andreas Widerøe Andersen [EMAIL PROTECTED]: I'm getting a lot of unauthorized ssh login attempts. I have a pretty basic FreeBSD 6.2 setup. I have compiled my own kernel. Here's what I get from my daily security run output:

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Kevin Hunter
At 11:22a -0400 on 26 Apr 2007, Hal wrote: On Apr 26, 2007, at 8:34 AM, Kevin Hunter wrote: In general, utilizing public/private keys for remote authentication is /much/ more secure than passwords. There is some debate about which is more secure public/private keys or username/password.

Re: How do I prevent unauthorized ssh login attempts?

2007-04-26 Thread Bill Campbell
On Thu, Apr 26, 2007, Kevin Hunter wrote: At 11:22a -0400 on 26 Apr 2007, Hal wrote: On Apr 26, 2007, at 8:34 AM, Kevin Hunter wrote: In general, utilizing public/private keys for remote authentication is /much/ more secure than passwords. There is some debate about which is more secure