On Thu, 15 May 2008 11:17:55 -0400
"Ben Scott" <[EMAIL PROTECTED]> wrote:

>   One variant of that strategy is to run the real SSH on some
> non-standard port, and then run a sentry on 22, so that anyone trying
> to connect to 22 is automatically blacklisted.

That may be overly brutal. I routinely log into a server with a
non-standard port, and every once in a while I forget to use '-p
xxxx'.  Certainly multiple simultaneous attempts should be blacklisted.

-- 
--
Jerry Feldman <[EMAIL PROTECTED]>
Boston Linux and Unix
PGP key id: 537C5846
PGP Key fingerprint: 3D1B 8377 A3C0 A5F2 ECBB  CA3B 4607 4319 537C 5846

Attachment: signature.asc
Description: PGP signature

_______________________________________________
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/

Reply via email to