linux.gentoo.user

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig2C819DBDDCC0E260BDEBC034
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Steve wrote:
> I'm one of the (many) people who has opportunists trying usernames and =

> passwords against SSH... while every effort has been made to secure thi=
s=20
> service by configuration; strong passwords; no root login remotely etc.=
=20
> I would still prefer to block sites using obvious dictionary attacks=20
> against me.

The best advice I can give is to use public key authentication only.=20
This will defend against all dictionary-based attacks, which is what you =

describe.

The only remaining "problem" is that your log files will be filled with=20
unsuccessful login attempts. A simple solution is to run sshd on a=20
non-standard, high-numbered port, e.g. in the 30'000. Bots only ever try =

to connect on port 22. This will *not* improve the protection of your=20
server, but it will avoid having your logs spammed.

-- Remy


--------------enig2C819DBDDCC0E260BDEBC034
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFHxccdCeNfIyhvXjIRAtwRAJ9SPBF6OYpDfcR34teUqBwe/d2wRwCgi4nT
TwIQKraWDGa8HrXJ1A2owb0=
=QtE8
-----END PGP SIGNATURE-----

--------------enig2C819DBDDCC0E260BDEBC034--

--
gentoo-user@lists.gentoo.org mailing list