Re: [CentOS] SSH attacks from china

2009-07-23 Thread mark . hanna
Sam Drinkard s...@wa4phy.net Sent by: centos-boun...@centos.org 07/23/2009 11:49 AM Please respond to CentOS mailing list centos@centos.org To CentOS mailing list centos@centos.org cc Subject Re: [CentOS] SSH attacks from china Bob Hoffman wrote: Okay, I have a server connected to the

Re: [CentOS] SSH without password on CentOS 5 ?

2009-07-20 Thread mark . hanna
I assume you mean public key based authentication... if so, one gotcha that verbose debug messages won't help you with is the permissions on the .ssh directory and the files underneath... they must be owned by the owner and cannot have any other permissions (e.g. chmod 700 .ssh and chmod 600

Re: [CentOS] Looking for recommendations for blocking hacking attempts

2009-07-09 Thread mark . hanna
If you are talking about restricting hacking attempts across multiple services (like ssh, smtp and http) then you are beginning to move into the realm of an IDS solution (like Snort) Currently I use denyhosts plus iptables blacklist for ssh on the servers side (plus multiple layers of firewall