From owner-freebsd-questions@FreeBSD.ORG Fri Jan 1 15:36:16 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AD5D81065670 for ; Fri, 1 Jan 2010 15:36:16 +0000 (UTC) (envelope-from djr@pdconsec.net) Received: from ipmail03.adl2.internode.on.net (ipmail03.adl2.internode.on.net [203.16.214.135]) by mx1.freebsd.org (Postfix) with ESMTP id 397728FC08 for ; Fri, 1 Jan 2010 15:36:15 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAD+kPUuWZcBC/2dsb2JhbADSUIQxBA Received: from goliath.pdconsec.net (HELO smtp.pdconsec.net) ([150.101.192.66]) by ipmail03.adl2.internode.on.net with SMTP; 02 Jan 2010 02:06:14 +1030 Received: from mail1.pdconsec.net ([192.168.1.41] helo=mail1.pdconsec.net) with IPv4:25 by smtp.pdconsec.net; 2 Jan 2010 02:39:37 +1100 Received: from smtp.pdconsec.net ([192.168.1.32] RDNS failed) by mail1.pdconsec.net with Microsoft SMTPSVC(6.0.3790.3959); Sat, 2 Jan 2010 02:35:46 +1100 Received: from [10.14.6.41] ([150.101.192.69] helo=[10.14.6.41]) with IPv4:25 by smtp.pdconsec.net; 2 Jan 2010 02:39:37 +1100 Message-ID: <4B3E1652.6040300@pdconsec.net> Date: Sat, 02 Jan 2010 02:35:46 +1100 From: David Rawling User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091204 Thunderbird/3.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <4B3E0D11.1080101@pdconsec.net> <20100101102412.4c7a0b21@scorpio.seibercom.net> In-Reply-To: <20100101102412.4c7a0b21@scorpio.seibercom.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 01 Jan 2010 15:35:46.0492 (UTC) FILETIME=[1658C7C0:01CA8AF8] Subject: Re: Blocking a slow-burning SSH bruteforce X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jan 2010 15:36:16 -0000 On 2/01/2010 2:24 AM, Jerry wrote: > On Sat, 02 Jan 2010 01:56:17 +1100 > David Rawling replied: > >> Apart from switching away from user authentication to private/public >> keys ... is there anything I can do to mitigate these attacks? Any >> advice welcome. >> > Is there a specific reason that you don't want to use keys? > If we're being brutally honest - I'd probably lose them ... Dave. -- David Rawling PD Consulting And Security Mob: +61 412 135 513 Email: djr@pdconsec.net