Re: throttle ssh logins (OpenSSH sshd)

On Fri, 18 Jan 2008 22:42:38 +0000, phil-news-nospam wrote:

On 07 Jan 2008 18:23:10 GMT Alan Strassberg <paleale@xxxxxxxxx> wrote:

| I'm tried of the script kiddies trying ssh logins. | Is
there a way to throttle (say max 3 connections per minute) |
using OpenSSH (4.5p1). I don't see anything in sshd_config for this. |
Or do I need to use tcp wrappers?

A more extreme option is to abandon the well-known port and use a
different port number. I did that, and they have not been bothering the
new port at all. It's not "security by obscurity" because it's not
considered to be a security solution. It is just an attempt to keep my
logs from being so cluttered.

More and more ISPs are doing network management. What this means
is that they will give low priority to (or even block) packets addressed
to non-standard ports - especially when the data in such packets is
encrypted. Which implies that you might be leaving legitimate users out
there in the cold.

.

Relevant Pages

  • Re: throttle ssh logins (OpenSSH sshd)
    ... |> different port number. ... |> considered to be a security solution. ... some libraries would be more of an issue. ...
    (comp.security.ssh)
  • Re: throttle ssh logins (OpenSSH sshd)
    ... A more extreme option is to abandon the well-known port and use a different ... and they have not been bothering the new port at ... security solution. ...
    (comp.security.ssh)
  • Re: Using legacy C/C++ code with C#
    ... way to use my legacy code from C#? ... the best way is to just port it and abandon the original. ... The latter is basically the same as the former, but more explicit. ...
    (microsoft.public.dotnet.languages.csharp)