[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] Re: Any update on SSH brute force attempts?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday, 15.10.2004 at 17:53 -0400, Jay Libove wrote:

> What are you doing/changing about your SSH configurations to reduce
> the possibility of these attacks finding any kind of hole in the
> OpenSSH software (that's what I run, so that's the only version I'm
> particularly concerned about) ?  Are you doing anything at all?

Attacks on my system seemed to be restricted to root, so I set the
'PermitRootLogin without-password' option, so that no root logins using
a password were possible - must be RSA key.  I also switched to
non-standard port.

Dave.
- -- 
Dave Ewart
Dave.Ewart@xxxxxxxxxxxxx
Computing Manager, Epidemiology Unit, Oxford
Cancer Research UK
PGP: CC70 1883 BD92 E665 B840 118B 6E94 2CFD 694D E370

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBc41nbpQs/WlN43ARAo+CAJ93kn9R5ofmHKS/IHvTno993NjI/ACfS2+f
BrO9xzfyhjkKYTvsycUUN88=
=m1XQ
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html