Re: [Full-disclosure] Brute force attack - need your advice

["Michael Simpson" <mikie.simpson@xxxxxxxxx>]

On 2/12/08, Abilash Praveen <contactme@xxxxxxxxxxxxxxxxxx> wrote:
> Ok - I may not be able to lock in the SSH to a particular IP, but can
> ofcourse try port-knocker and a non-password-based SSH. I will research a
> bit about these as i'm not very familiar with a port-knocker and a
> non-password-based SSH yet.
>
> Thanks for your advice again. Thanks to Keith too. :o)
>

use of public/private keys for sshd and then turning off password
based access rocks

if you have to use passwords for ssh then check out denyhosts

<http://denyhosts.sourceforge.net/>

works a treat

mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/