Re: ftp server question
- From: Borked Pseudo Mailed <nobody@xxxxxxxxxxxxxxxxx>
- Date: Thu, 29 Jun 2006 11:51:38 -0600 (MDT)
Rick Merrill wrote:
daemon, and local delivery only SMTP/IMAP servers here. I have rate
limiting on the SSH server, so it only gets attacked once every
three minutes tops. This makes most of the SSH brute force bots go
<snip>
"rate limiting" - upload speed from FTP server is limited to 43KB,
but it doesn't slow the door-knob twisters. What is the SSH rate
limiting?
OK that was way misleading. My fault. :) What I was trying to say was
that my firewall monitors new connections, and if too many attempts are
made to establish a new connection to my SSH server within a certain
period of time, access to the SSH server is shut off for a while.
When someone tries this dictionary attack crap they're doing nothing
but trying to establish one connection after another. If the password
is wrong, the connection is never fully established. Many/most
firewalls are able to tell the difference between established, and new.
It's called being "stateful". Knowing about the "state" of a
connection.
So "rate limiting" was a little misleading, especially since you're in
that frame of mind (rightfully so) where it means constraining
throughput. But in effect, what I do at the firewall is "rate limit"
the number of failed connection attempts to 3 in any 60 second period
of time, with a 10 minute "break" in between. Or something like that,
it's been so long since I set it up I could be off on the exact
timing. ;)
All users can be id'd by IP address easily and in advance. Therefore
What VPN is the easiest to install (on both ends)?
Well, I'm not a Windows guy so I might not be the best person to answer
this. But As I understand it WinXP has it's own "built it" VPN client.
It would of course talk to the Windows "server" version, although I
don't know what you need for that. Have no clue if XP will serve
connections this way or not. But it would certainly be the easiest as
far as clients are concerned, assuming the standard distribution of
Windows boxen. ;)
If it were me, the answer would be easy. OpenVPN. This might be a
solution for you too, as I said, I have no clue what Windows will do as
far as VPN goes. Sorry. :(
.
- References:
- ftp server question
- From: Peter
- Re: ftp server question
- From: Borked Pseudo Mailed
- Re: ftp server question
- From: Rick Merrill
- Re: ftp server question
- From: TwistyCreek
- Re: ftp server question
- From: Rick Merrill
- Re: ftp server question
- From: Borked Pseudo Mailed
- Re: ftp server question
- From: Rick Merrill
- ftp server question
- Prev by Date: Re: wireless security
- Next by Date: Re: Ebay phishing,
- Previous by thread: Re: ftp server question
- Next by thread: A Hijacking Problem
- Index(es):
Relevant Pages
|