[nycbug-talk] SSH attacks

[Max Gribov]

csnyder wrote:
>
> Once again, I find myself wishing there was some way to do this within
> sshd itself, rather than rely on a firewall feature.
>
>   
why?.. firewalls are in the kernel, sshd is in the userland - cheaper
and safer


> It's a great marketing strategy for the BSDs, though. "Running
> OpenSSH? Then you need PF to protect it." Meh.
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>