Re:sshd security

From: Neo-Vortex (root_at_Neo-Vortex.Ath.Cx)
Date: 09/19/04

  • Next message: Zoran Kolic: "Re: Attacks on ssh port"
    Date: Sun, 19 Sep 2004 22:47:07 +1000 (EST)
    To: Terry <terry@mrtux.co.uk>
    
    

    On Sun, 19 Sep 2004, Terry wrote:

    > I had the same problem so i setup up hosts.allow to only allow access
    > from certain ips i require
    > This has the affect of killing the connection from any other ip befor
    > gettign to any login prompt
    > example below
    > sshd : localhost : allow
    > sshd : 192.168.2. : allow
    > sshd : 82.41.115.213 :allow
    > sshd : 216.123.248.219 : allow <-- public ip i wish to allow of course
    > i have changed it
    > sshd : all : deny
    >
    > This then shows in log instead of failed login attempts
    >
    > dot.blah.co.uk refused connections:
    > Sep 17 22:11:55 dlt sshd[35669]: refused connect from usen-219x113x213x21.ap-US.usen.ad.jp (219.113.213.21)

    you could always just use ipf/ipfw if the log messages are annoying you...

    > Regards Terry
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Zoran Kolic: "Re: Attacks on ssh port"

    Relevant Pages

    • Re: Partial messages returned over socket
      ... I have seen servers that upon ... telnet negotiation in the second and a login prompt ... login prompt after accepting a connection (turned out to be a DNS ...
      (comp.lang.java.programmer)
    • gdb help
      ... I have a situation where I have some legacy code that uses VNC. ... connection and the http connection. ... and then the login prompt for the viewer will appear. ... Is it possible to get gdb to trace execution line-by-line, ...
      (comp.os.linux.misc)
    • Re: Need help with iptables
      ... through ssh I get the log messages with packets from 'allow-ssh-out: ... iptables stop), the connection gets established no problem. ... Depending how hostile your environment is, and how nasty you want to be to your users, you might consider only looking at TCP SYN's inbound to the SSH port, and then filtering those. ...
      (comp.os.linux.networking)
    • [Full-Disclosure] lucent router gives root
      ... Here is an example of this vulnerability that can be found online: ... [in TERMINAL-SERVER] ... here a connection is made and the Terminal Server presents a Login Prompt ...
      (Full-Disclosure)
    • Re: FTP Connection Delays
      ... > John V. Kjellman wrote: ... >> second delay before I get the login prompt, ... the user originating the connection exists on all machines being ...
      (linux.redhat.misc)