Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Sep 2007 08:18:18 -0400
From:      Aldisa Admin <admin@aldisa.ca>
To:        Derek Ragona <derek@computinginnovations.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Problem with logs
Message-ID:  <46E92A8A.3070300@aldisa.ca>
In-Reply-To: <6.0.0.22.2.20070912083213.026faac0@mail.computinginnovations.com>
References:  <46E7E651.4010708@aldisa.ca> <6.0.0.22.2.20070912083213.026faac0@mail.computinginnovations.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello Derek,

I don't use hosts.allow.  I use the AllowUsers directive in the sshd.conf file to limit the actual username/ip combinations.  As a rule, I also close port 22 on the router.  When I need external access (e.g. when I am travelling) I will open some other port and have sshd "Listen" on that port as well.  At that time, I will add an obscure username to AllowUsers with any ip address.  Of course, I use the custom port to login.

Prior to implementing this setup, I used to get frequent daily login attempts.  Now I don't get any.

Thanks for your feedback.

Abid

On 12-Sep-07 9:33 AM, Derek Ragona wrote:
> 
> How are you limiting this ssh access?  Are you using hosts.allow?  If 
> you are not using hosts.allow, I would suggest you do so.
> 
>         -Derek




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46E92A8A.3070300>