On Wednesday 15 December 2004 11:30 pm, Scott Paul Robertson wrote: > My server gets on the average about 500 of these a week for roughly 2-8 > clients. I just block them using /etc/hosts.deny (Redhat/Fedora).
I've seen it on BYU machines as well. > One thing that helped was turning off root login over ssh. Yep. Something else I do if I can is limit the IP ranges that can ssh into certain machines in /etc/hosts.allow, which basically has the same effect and the attackers as Scott's /etc/hosts.deny solution. -- Jacob Albretsen [EMAIL PROTECTED] -------------------- BYU Unix Users Group http://uug.byu.edu/ The opinions expressed in this message are the responsibility of their author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. ___________________________________________________________________ List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
