[ale] What's the utility to shut out hackers/viri attempting sshd attacks?

Philip Polstra ppolstra at gmail.com
Thu Feb 2 21:38:55 EST 2006


I had a bunch of attempts on one of my machines from something like 6
different countries.  A simple solution is to change your hosts.allow file
to only point to networks you might use.  I.e.

/etc/hosts.allow
ssh: 192. myother.net

/etc/hosts.den
ssh: all

You could also do this in your firewall or any other number of places, but
this is probably the quickest.

On 2/2/06, Jim <ale_nospam at fayettedigital.com> wrote:
>
> I've got a situation where a Korean site is banging sshd trying bunches
> of random user/passwords.  I know I've seen it discussed before.  Isn't
> there a utility that automatically adds this IP to a .deny file or
> otherwise shuts him out?
>
> Thanks,
> Jim.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>
-------------- next part --------------
An HTML attachment was scrubbed...




More information about the Ale mailing list