Re: [Full-disclosure] Brute force attack - need your advice



On 2/12/08, Abilash Praveen <contactme@xxxxxxxxxxxxxxxxxx> wrote:
Ok - I may not be able to lock in the SSH to a particular IP, but can
ofcourse try port-knocker and a non-password-based SSH. I will research a
bit about these as i'm not very familiar with a port-knocker and a
non-password-based SSH yet.

Thanks for your advice again. Thanks to Keith too. :o)


use of public/private keys for sshd and then turning off password
based access rocks

if you have to use passwords for ssh then check out denyhosts

<http://denyhosts.sourceforge.net/>

works a treat

mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/