Re: Self Defense thourg DoS... ? (was: too many illegal connection attempts through ssh)

2005-04-14 Thread Benjamin Rossen
On Thursday 14 April 2005 00:30, Hexren wrote: Central _trusted_ authority leaves a bitter taste in my mouth... but then I may be paranoid. Anyway if I am a local user on a machine and I have access to an ssh binary (that is what I meant with ssh access) and bash, I can churn out connections

Re: too many illegal connection attempts through ssh

2005-04-13 Thread Ed Stover
Forgive the top posting (long message) ;) A quick way to make that crap go away is to run your ssh on a different port. quick, simple, effective. I used to have those brute force attacks every day and fill my logs and I would go in and create and entry that that entire Netmask in the ipfw and

Re[2]: too many illegal connection attempts through ssh

2005-04-13 Thread Daniel Gerzo
Hi Ed, Wednesday, April 13, 2005, 10:46:07 PM, you wrote these comments: Forgive the top posting (long message) ;) A quick way to make that crap go away is to run your ssh on a different port. quick, simple, effective. I used to have those brute force attacks every day and fill my logs and

Re: too many illegal connection attempts through ssh

2005-04-13 Thread Benjamin Rossen
On Wed, 2005-04-06 at 07:15 +, Edwin D. Vinas wrote: hello, shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to

Re[2]: too many illegal connection attempts through ssh

2005-04-13 Thread Hexren
On Wed, 2005-04-06 at 07:15 +, Edwin D. Vinas wrote: hello, shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to

Re: too many illegal connection attempts through ssh

2005-04-13 Thread Benjamin Rossen
On Wednesday 13 April 2005 23:55, Hexren wrote: Just an idea... Benjamin Rossen - Sounds fun but opens the door for every local user with ssh access to DOS the machine he is on. I am not that found of the idea. Not at all. Let us say that

Self Defense thourg DoS... ? (was: too many illegal connection attempts through ssh)

2005-04-13 Thread Hexren
On Wednesday 13 April 2005 23:55, Hexren wrote: Just an idea... Benjamin Rossen - Sounds fun but opens the door for every local user with ssh access to DOS the machine he is on. I am not that found of the idea. Not at all. Let us say

too many illegal connection attempts through ssh

2005-04-06 Thread Edwin D. Vinas
hello, shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to guess my login usernames? can i configure the firewall to check

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Joshua Tinnin
On Wednesday 06 April 2005 00:15, Edwin D. Vinas [EMAIL PROTECTED] wrote: hello, shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Rob
Edwin D. Vinas wrote: hello, shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to guess my login usernames? can i

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Erik Nørgaard
Edwin D. Vinas wrote: shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to guess my login usernames? can i configure the

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Emanuel Strobl
Am Mittwoch, 6. April 2005 12:07 schrieb Erik Nørgaard: Edwin D. Vinas wrote: shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Joshua Tinnin
On Wednesday 06 April 2005 06:58, Emanuel Strobl [EMAIL PROTECTED] wrote: Am Mittwoch, 6. April 2005 12:07 schrieb Erik Nørgaard: Edwin D. Vinas wrote: shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the

Re: too many illegal connection attempts through ssh

2005-04-06 Thread Philip Hallstrom
shown below is snapshot of too many illegal attempts to login to my server from a suspicious hacker. this is taken from the /var/log/auth.log. my question is, how do i automatically block an IP address if it is attempting to guess my login usernames? can i configure the firewall to check the