[svlug] What to do about ssh hack attempts?

[cqx@nefud.org]

I use the DenyHosts script to keep my /etc/hosts.deny updated.

http://denyhosts.sourceforge.net/


-a


Jeff Walter <jeffw at gentoo.org> wrote:
>Jon Zweig wrote:
>> Besides disabling root login, is there anything I ought to be doing
>> about this? Is there a way to harden against these ip addresses?
>
>     Personally, I block SSH access from all of China, which has eliminated 
>around 60% of all SSH attacks.  Aside from that I also block hosts which are the 
>source of more than 50 failures in any 20 minute period.  Works pretty well.
>
>--
>Jeff Walter
>
>_______________________________________________
>svlug mailing list
>svlug at lists.svlug.org
>http://lists.svlug.org/lists/listinfo/svlug
>
--
.allan.