Re: Onpening and Closing ports

2007-02-13 Thread Karol Kwiatkowski
Andy Greenwood wrote: > On 2/13/07, Zbigniew Szalbot <[EMAIL PROTECTED]> wrote: >> Hello, >> >> Peter N. M. Hansteen wrote: >> > You can head them off rather easily with a short PF rule set, see >> > eg http://home.nuug.no/~peter/pf/en/bruteforce.html. >> > >> > They can actually be fun to watch :)

Re: Onpening and Closing ports

2007-02-13 Thread Andy Greenwood
On 2/13/07, Zbigniew Szalbot <[EMAIL PROTECTED]> wrote: Hello, Peter N. M. Hansteen wrote: > You can head them off rather easily with a short PF rule set, see > eg http://home.nuug.no/~peter/pf/en/bruteforce.html. > > They can actually be fun to watch :) It was funny for me because I set the ma

Re: Onpening and Closing ports

2007-02-13 Thread Zbigniew Szalbot
Hello, Peter N. M. Hansteen wrote: > You can head them off rather easily with a short PF rule set, see > eg http://home.nuug.no/~peter/pf/en/bruteforce.html. > > They can actually be fun to watch :) It was funny for me because I set the max con rule to 10 and then logged in 10 times to see if tha

Re: Onpening and Closing ports

2007-02-12 Thread Peter N. M. Hansteen
Dave Carrera <[EMAIL PROTECTED]> writes: > Had a little nasty person trying to break my sshd on port 22. You can head them off rather easily with a short PF rule set, see eg http://home.nuug.no/~peter/pf/en/bruteforce.html. They can actually be fun to watch :) -- Peter N. M. Hansteen, member

Re: Onpening and Closing ports

2007-02-12 Thread Ted Mittelstaedt
- Original Message - From: "Robert C Wittig" <[EMAIL PROTECTED]> To: Sent: Monday, February 12, 2007 1:53 PM Subject: Re: Onpening and Closing ports > Dave Carrera wrote: > > Hi All, > > > > Had a little nasty person trying to break my sshd on

Re: Onpening and Closing ports

2007-02-12 Thread Robert C Wittig
Dave Carrera wrote: Hi All, Had a little nasty person trying to break my sshd on port 22. I need to change and open a new port for sshd but i do not know how. Can one of you kind people help me with this please Many kind regards Instead of changing the sshd port, I set a PF rule that only

Re: Onpening and Closing ports

2007-02-12 Thread Jeff Palmer
<..snip..> If you use good passwords, the SSH dictionary attacks are not a great concern. <..snip> -Chuck <..snip..> Or better yet, disable username/password authentication, and just use ssh keys. it's more secure, and they can bruteforce it all day long. Even if you had a password of

Re: Onpening and Closing ports

2007-02-12 Thread Gerard Seibert
On Monday February 12, 2007 at 04:27:53 (PM) Chuck Swiger wrote: > On Feb 10, 2007, at 11:37 PM, Dave Carrera wrote: > > Had a little nasty person trying to break my sshd on port 22. > > > > I need to change and open a new port for sshd but i do not know how. > > > > Can one of you kind people he

Re: Onpening and Closing ports

2007-02-12 Thread Chuck Swiger
On Feb 10, 2007, at 11:37 PM, Dave Carrera wrote: Had a little nasty person trying to break my sshd on port 22. I need to change and open a new port for sshd but i do not know how. Can one of you kind people help me with this please If you use good passwords, the SSH dictionary attacks are no

Re: Onpening and Closing ports

2007-02-12 Thread Derek Ragona
You can change that in sshd_config, but you may also want to use hosts.allow to restrict ssh connections further. -Derek At 01:37 AM 2/11/2007, Dave Carrera wrote: Hi All, Had a little nasty person trying to break my sshd on port 22. I need to change and open a new port for sshd but

Onpening and Closing ports

2007-02-12 Thread Dave Carrera
Hi All, Had a little nasty person trying to break my sshd on port 22. I need to change and open a new port for sshd but i do not know how. Can one of you kind people help me with this please Many kind regards Dave ___ freebsd-questions@freebsd.org m