[Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Robert Fox
Hello all! After reading this article: http://it.slashdot.org/story/13/02/16/2129244/ssh-password-gropers-are-now-trying-high-ports?utm_source=rss1.0mainlinkanonutm_medium=feed I have been using Blockhosts (http://www.aczoom.com/blockhosts) for many years now without issue (I also use a

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread finid
Sounds like a good idea to have something in place out of the box. PC-BSD, which has SSH server running by default also has DenyHosts configured and running by default. -- finid On 2013-02-19 09:55, Robert Fox wrote: Hello all! After reading this article:

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Guillaume Rousse
Le 19/02/2013 11:06, fi...@linuxbsdos.com a écrit : Sounds like a good idea to have something in place out of the box. PC-BSD, which has SSH server running by default also has DenyHosts configured and running by default. That's a asysadmin choice, not a packager one. Bloating every machines

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread finid
If that's how you feel about having a program like DenyHosts running by default, do you feel the same way about having a firewall running and configured out of the box. Is a firewall a sysadmin's or packager's choice? -- finid On 2013-02-19 11:03, Guillaume Rousse wrote: Le 19/02/2013

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Guillaume Rousse
Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running by default, do you feel the same way about having a firewall running and configured out of the box. Is a firewall a sysadmin's or packager's choice? A sysadmin choice.

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Robert Fox
On Tue, 2013-02-19 at 12:35 +0100, Guillaume Rousse wrote: Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running by default, do you feel the same way about having a firewall running and configured out of the box. Is a

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Colin Guthrie
'Twas brillig, and Robert Fox at 19/02/13 11:45 did gyre and gimble: On Tue, 2013-02-19 at 12:35 +0100, Guillaume Rousse wrote: Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running by default, do you feel the same way about

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread finid
On 2013-02-19 12:13, Colin Guthrie wrote: 'Twas brillig, and Robert Fox at 19/02/13 11:45 did gyre and gimble: On Tue, 2013-02-19 at 12:35 +0100, Guillaume Rousse wrote: Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread finid
On 2013-02-19 11:45, Robert Fox wrote: On Tue, 2013-02-19 at 12:35 +0100, Guillaume Rousse wrote: Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running by default, do you feel the same way about having a firewall running

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Colin Guthrie
'Twas brillig, and fi...@linuxbsdos.com at 19/02/13 12:44 did gyre and gimble: On 2013-02-19 12:13, Colin Guthrie wrote: So overall I'd welcome a default setup that allows things to be more secure/robust by default (obviously balanced against user experience - e.g. a *very* secure setup would

Re: [Mageia-dev] Fail2Ban vs Blockhosts vs DenyHosts vs iptable throttle for SSH

2013-02-19 Thread Claire Robinson
On 19/02/13 12:51, fi...@linuxbsdos.com wrote: On 2013-02-19 11:45, Robert Fox wrote: On Tue, 2013-02-19 at 12:35 +0100, Guillaume Rousse wrote: Le 19/02/2013 12:20, fi...@linuxbsdos.com a écrit : If that's how you feel about having a program like DenyHosts running by default, do you