mailing list archives
Re: Any update on SSH brute force attempts?
From: Dave Ewart <Dave.Ewart () cancer org uk>
Date: Mon, 18 Oct 2004 10:31:19 +0100
-----BEGIN PGP SIGNED MESSAGE-----
On Friday, 15.10.2004 at 17:53 -0400, Jay Libove wrote:
What are you doing/changing about your SSH configurations to reduce
the possibility of these attacks finding any kind of hole in the
OpenSSH software (that's what I run, so that's the only version I'm
particularly concerned about) ? Are you doing anything at all?
Attacks on my system seemed to be restricted to root, so I set the
'PermitRootLogin without-password' option, so that no root logins using
a password were possible - must be RSA key. I also switched to
Dave.Ewart () cancer org uk
Computing Manager, Epidemiology Unit, Oxford
Cancer Research UK
PGP: CC70 1883 BD92 E665 B840 118B 6E94 2CFD 694D E370
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
-----END PGP SIGNATURE-----
Full-Disclosure - We believe in it.