[nycbug-talk] Distributed ssh dictionary attacks

Andy Kosela akosela at andykosela.com
Wed Nov 26 14:27:59 EST 2008


On Wed, Nov 26, 2008 at 8:09 PM, Miles Nordin <carton at ivy.net> wrote:
>>>>>> "ak" == Andy Kosela <akosela at andykosela.com> writes:
>
>    ak> I don't think it's very reasonable to open sshd(8) to the
>    ak> whole world
>
> what do you use to get into your machines then <snip>

I just allow only specific ip's/networks. If this is not a server with
hundreds of users coming from all over the world that setup works very
nicely.. Zero noise in the logs.

-- 
Andy Kosela
ora et labora



More information about the talk mailing list