1 |
On Sun, 15 Jan 2012 12:54:51 -0500 |
2 |
"Walter Dnes" <waltdnes@××××××××.org> wrote: |
3 |
|
4 |
> On Thu, Jan 12, 2012 at 06:30:03AM -0500, Tanstaafl wrote |
5 |
> |
6 |
> > This is nothing like changing the port for SSH - a port scanner can |
7 |
> > figure that one out in seconds... |
8 |
> |
9 |
> A real BOFH would set up a dummy instance of sshd on the regular |
10 |
> port, as well as a real sshd instance on another port. The dummy |
11 |
> instance could be set up to always fail the login attempt, and with |
12 |
> special iptable rules to not clutter up your logfile. |
13 |
> |
14 |
|
15 |
Actually a real sysadmin[1] would run ssh standardly plus OSSEC with |
16 |
active rules and dynamically block our Chinese friends |
17 |
|
18 |
[1] "real sysadmin" being defined as the quintessentially lazy dude who |
19 |
is really not into causing himself pain or doing anything that would |
20 |
increase support tickets in his inbox |
21 |
|
22 |
|
23 |
-- |
24 |
Alan McKinnnon |
25 |
alan.mckinnon@×××××.com |