Re: How to Stop Bruit Force ssh Attempts?

2006-04-12 Thread Ean Kingston
On Tuesday 11 April 2006 21:35, Jonathan Franks wrote: On Mar 18, 2006, at 12:39 PM, Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ ip connectivity to hosts that try and fail a given

Re: How to Stop Bruit Force ssh Attempts?

2006-04-11 Thread Jonathan Franks
On Mar 18, 2006, at 12:39 PM, Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ ip connectivity to hosts that try and fail a given number of times? Is there a port or something that I can

Re: How to Stop Bruit Force ssh Attempts?

2006-04-11 Thread Adam Stroud
I second that. I have been doing the same thing (except running an OpenBSD firewall that blocks the offenders via pf) and it works like a charm. A Jonathan Franks wrote: On Mar 18, 2006, at 12:39 PM, Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh.

Re: How to Stop Bruit Force ssh Attempts?

2006-04-11 Thread Chris Maness
Jonathan Franks wrote: On Mar 18, 2006, at 12:39 PM, Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ ip connectivity to hosts that try and fail a given number of times? Is there a port

Re: How to Stop Bruit Force ssh Attempts?

2006-04-11 Thread John Cruz
I used to have problems with brute force attempts as well. I just changed the port that SSH uses (TCP/IP port, not ports collection port) and the problems have stopped. I made it something that means something to me and maybe not others, so it's a simple and powerful way of getting the job

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Pat Maddox
The best thing you can do is move SSH to another port and disable password authentication, and use keys instead. Pat On 3/18/06, Chris Maness [EMAIL PROTECTED] wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Wes Santee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ip connectivity to hosts that try and fail a given number of times? Is there a port or

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Philip Hallstrom
In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ip connectivity to hosts that try and fail a given number of times? Is there a port or something that I can install to give this kind of protection. I'm still kind

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Chris Maness
Wes Santee wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris Maness wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ip connectivity to hosts that try and fail a given number of times? Is

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Kris Anderson
--- Chris Maness [EMAIL PROTECTED] wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ip connectivity to hosts that try and fail a given number of times? Is there a port or something that I can

Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Chris Maness
Kris Anderson wrote: --- Chris Maness [EMAIL PROTECTED] wrote: In my auth log I see alot of bruit force attempts to login via ssh. Is there a way I can have the box automatically kill any tcp/ip connectivity to hosts that try and fail a given number of times? Is there a port or