Re: When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread John Carter
On Wed, 31 Oct 2007, Rex Johnston wrote: This has been going on for years. It's definitely a `bot, as it can cause a significant jump in traffic (and your bill). Grr. Hmm. This looks like what I want.. -- http://www.netfilt

Re: When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread Nick Rout
On Wed, October 31, 2007 9:37 am, John Carter wrote: > > But a static ip address costs $10 per month. BLOODY RIPOFF!! > > A quick scriptie involving wget to pull the status page off the DSE > router and ruby Net::ftp to push the encrypted result onto a > webserver and a matching one to pull it dow

Re: When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread Don Gould
Can we say "DenySSH" :) I had this same problem last week... though, I've installed it but I'm not sure how to make it work... Neil where are you ;p Neils got a whole page on his website about DenySSH. Cheers Don John Carter wrote: So I wanted to take some work home... Mail proved flaky,

Re: When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread Robert J. C. Himmelmann
Hi, you may want to try denyhosts (http://www.denyhosts.net). After a number of unsuccessful logins it adds the clients IP to /etc/hosts.deny. That should make brute force virtually impossible. It is a quite lightweight. Adding */10 * * * * rootpython /usr/bin/denyhosts -c /etc/denyhosts.

Re: When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread Rex Johnston
John Carter wrote: So I wanted to take some work home... This is, perhaps, the root of the problem. So scp does well, let me set that up. Open up port 22 pinhole in the Never use port 22. Ever. Note 1. The ip address changes surprisingly often! The telco is doing way more work than it n

When the damn Yankee's attack. Tales of ssh

2007-10-30 Thread John Carter
So I wanted to take some work home... Mail proved flaky, spam filters, size limits, risk of finger trouble when entering address, black holes, cosmic rays, BOfH knows why. So scp does well, let me set that up. Open up port 22 pinhole in the home router/firewall. Hmm. Wish I could open up somethi