Date: Mon, 15 Jan 2007 11:01:41 +1100 From: Norberto Meijome <freebsd@meijome.net> To: Norberto Meijome <freebsd@meijome.net> Cc: FreeBSD-Questions <freebsd-questions@freebsd.org>, VeeJay <maanjee@gmail.com> Subject: Re: Please Help! How to STOP them... Message-ID: <20070115110141.7c96e3b2@localhost> In-Reply-To: <20070115105347.391e6d41@localhost> References: <2cd0a0da0701121343g7fa2535fv4a7b201f5a03aff2@mail.gmail.com> <45AA40A2.2000906@locolomo.org> <20070115105347.391e6d41@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 15 Jan 2007 10:53:47 +1100
Norberto Meijome <freebsd@meijome.net> wrote:
> I would add to limit the number of passwords retries - so if they want to
> hammer you, at least they'll have to try a new connection. Of course, this
> leaves you open to a DOS ... but , well, i guess you are still open to that
> the second you're on the net :)
dont forget that the fallback between keyboard-auth and key based auth counts
as a failure, so make sure you have at least 2 failures allowed.
_________________________
{Beto|Norberto|Numard} Meijome
"Quality is never an accident, it is always the result of intelligent effort."
John Ruskin (1819-1900)
I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070115110141.7c96e3b2>