Gentoo Archives: gentoo-user

From: Richard Broersma Jr <rabroersma@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] SSH authentication attempts - serious issue
Date: Mon, 05 Jun 2006 15:52:42
Message-Id: 20060605154302.53387.qmail@web31813.mail.mud.yahoo.com
In Reply to: Re: [gentoo-user] SSH authentication attempts - serious issue by Oliver Schmidt
1 > Try use Denyhosts ... no problem with bruteforce attacks anymore. Denyhosts
2 > add the IP of the attacker to the /etc/hosts.deny file.
3 > Install it with:
4 > ACCEPT_KEYWORDS="~x86" emerge denyhosts
5 > and add to your /etc/crontab
6 > */10 * * * * root python /usr/bin/denyhosts -c /etc/denyhosts.conf
7 >
8 > Use it now for more then a year... its perfect to block bruteforce attacks.
9
10 Also, you can edit your denyhost conf file to report affending IP to their denyhosts server and
11 also download an updated list of affending IP that other community members have reported. Using
12 this feature, you wont give "crackers" a first chance at getting to your server.
13
14 Regards,
15
16 Richard Broersma
17 --
18 gentoo-user@g.o mailing list