If you are talking about restricting "hacking" attempts across multiple
services (like ssh, smtp and http) then you are beginning to move into the
realm of an IDS solution (like Snort)
Currently I use denyhosts plus iptables blacklist for ssh on the servers
side (plus multiple layers of firewal
I assume you mean public key based authentication... if so, one "gotcha"
that verbose debug messages won't help you with is the permissions on the
.ssh directory and the files underneath... they must be owned by the
"owner" and cannot have any "other" permissions (e.g. chmod 700 .ssh and
chmod
Sam Drinkard
Sent by: centos-boun...@centos.org
07/23/2009 11:49 AM
Please respond to
CentOS mailing list
To
CentOS mailing list
cc
Subject
Re: [CentOS] SSH attacks from china
Bob Hoffman wrote:
> Okay, I have a server connected to the net but have not added fail2ban
or
> anything on
3 matches
Mail list logo