Date: Wed, 12 Apr 2006 12:15:59 +0300 (EEST) From: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua> To: Dmitriy Kirhlarov <dimma@higis.ru> Cc: freebsd-stable@freebsd.org Subject: Re: bruteforce Message-ID: <20060412121116.S84879@atlantis.atlantis.dp.ua> In-Reply-To: <20060411170437.GD66947@dimma.mow.oilspace.com> References: <443B6FC8.8080503@egonflower.com> <20060411170437.GD66947@dimma.mow.oilspace.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello!
On Tue, 11 Apr 2006, Dmitriy Kirhlarov wrote:
> On Tue, Apr 11, 2006 at 10:58:48AM +0200, Matteo 'egon' Baldi wrote:
>> Hy, I'm triing to find a solution to bruteforce attack, mostly on port 22,
>>without
>> moving services on different ports.
>
> try to use
> /usr/ports/security/sshit
-----------------------^^^^
Funny name ;)
For me the following specifications in sshd2_config (that's for SSH.COM's
security/ssh2) work reasonably:
LoginGraceTime 60
AuthInteractiveFailureTimeout 10
These timeouts really make password guessing robots unhappy w/o affecting
my happiness ;)
> By.
> Dmitriy
Sincerely, Dmitry
--
Atlantis ISP, System Administrator
e-mail: dmitry@atlantis.dp.ua
nic-hdl: LYNX-RIPE
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060412121116.S84879>