Re: [gentoo-user] Brutal force attack

[Adrian CAPDEFIER]

Pe data de Luni 06 Decembrie 2004 23:42, Luigi Pinna a scris:
> Alle 22:28, lunedì 06 dicembre 2004, Adrian CAPDEFIER ha scritto:
> > is he doing that using ssh? If your computer is not a public server
> > where people expect to connect on port 22 then you can alter the port
> > to say 2222. One of the best security measures around :). You could
> > also disable password logins and go for key-based authentification
> > (assuming this doesn't restrict you in some way)
> >
> > Good luck.
> >
> > Adi.
>
> No, my computer is not a public server, I can change the listen port;
> I'd use key and password: usually I connect from the same machine.
> I want to do that: a rda key from the host  allows to connect to the ssh
> server and after the usual authentication.
> Now I try to install a firewall and after that I'd do that.
> Is it complicated?
> In this moment I try to learn about firewall-kernel-2.6 modules...
> Thanks,
> Luigi

A firewall is a must for every putter connected to the Internet IMO. If you 
install one you can allow access on port 22 to only some hosts and deny to 
everyone else (or the other way arround).
Alternatively if you're feeling devilish and bored you could also install a 
traffic shaper and make the incomming speed on port 22 (except for some 
hosts) to 1B/s >:)

If you want I can e-mail to you a version of my script used for neghibourhood 
routing that I use to protect my personal computer.

Adi.

--
gentoo-user@g.o mailing list