1 |
Claudinei Matos wrote: |
2 |
> Hi, |
3 |
> |
4 |
> I have a lot of connection attempts in my ssh server. I've take a look |
5 |
> at sshd_config man pages but I didn't found a way to deny the source |
6 |
> ip of the attempts by 5 minutes (i.e.) if this ip can't login after 5 |
7 |
> attempts (i.e.). Is there a way to do this? |
8 |
|
9 |
I see the same thing on many of my servers. What's the real issue? |
10 |
|
11 |
I configure my sshd to only allow public key-based authentication. I use |
12 |
1024 bit DSA keys and SSHv2 only. They can try brute forcing the box for |
13 |
centuries if they want, and they won't come any closer to getting in. I |
14 |
personally don't see a huge point to blocking attacks, but only if |
15 |
you're set up securely. |
16 |
|
17 |
Users that allow SSHv1 or allow password auth and use weak passwords, |
18 |
now that is an issue to worry about, but you've got bigger problems on |
19 |
your hands. |
20 |
|
21 |
DS |
22 |
-- |
23 |
gentoo-server@g.o mailing list |