Re: [CentOS] Looking for recommendations for blocking hacking attempts

2009-07-09 Thread mark . hanna
If you are talking about restricting "hacking" attempts across multiple services (like ssh, smtp and http) then you are beginning to move into the realm of an IDS solution (like Snort) Currently I use denyhosts plus iptables blacklist for ssh on the servers side (plus multiple layers of firewal

Re: [CentOS] SSH without password on CentOS 5 ?

2009-07-20 Thread mark . hanna
I assume you mean public key based authentication... if so, one "gotcha" that verbose debug messages won't help you with is the permissions on the .ssh directory and the files underneath... they must be owned by the "owner" and cannot have any "other" permissions (e.g. chmod 700 .ssh and chmod

Re: [CentOS] SSH attacks from china

2009-07-23 Thread mark . hanna
Sam Drinkard Sent by: centos-boun...@centos.org 07/23/2009 11:49 AM Please respond to CentOS mailing list To CentOS mailing list cc Subject Re: [CentOS] SSH attacks from china Bob Hoffman wrote: > Okay, I have a server connected to the net but have not added fail2ban or > anything on