From owner-freebsd-questions@FreeBSD.ORG Sat Oct 22 15:11:00 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 54C7D106566B for ; Sat, 22 Oct 2011 15:11:00 +0000 (UTC) (envelope-from fbsd@thorshammare.org) Received: from smtprelay-b12.telenor.se (smtprelay-b12.telenor.se [62.127.194.21]) by mx1.freebsd.org (Postfix) with ESMTP id CBF978FC1F for ; Sat, 22 Oct 2011 15:10:59 +0000 (UTC) Received: from iph4.telenor.se (iph4.telenor.se [195.54.127.135]) by smtprelay-b12.telenor.se (Postfix) with ESMTP id 011E91403A for ; Sat, 22 Oct 2011 17:10:57 +0200 (CEST) X-SENDER-IP: [83.227.225.121] X-LISTENER: [smtp.bredband.net] X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AltDAKPcok5T4+F5PGdsb2JhbABDm0uNVRkBAQEBNzKBbgEBAQEDAQEBBSAmCBgLDQMCFgIJGA8HGQ4BBQQIAwcDEQEBBAEHBwQBChACBIdhBrI9hTGDDwSHVooYk3g X-IronPort-AV: E=Sophos;i="4.69,391,1315173600"; d="scan'208";a="1992102089" Received: from ua-83-227-225-121.cust.bredbandsbolaget.se (HELO odin.thorshammare.org) ([83.227.225.121]) by iph4.telenor.se with ESMTP; 22 Oct 2011 17:10:57 +0200 Received: from Obah (obah [192.168.1.10]) by odin.thorshammare.org (8.14.5/8.14.5) with ESMTP id p9MFAsjr027351; Sat, 22 Oct 2011 17:10:54 +0200 (CEST) (envelope-from fbsd@thorshammare.org) From: "Hasse Hansson" To: "'Polytropon'" , "'Bruce Cran'" , "'Michael Powell'" References: <000001cc90c0$a0c16050$e24420f0$@org> <4EA2CE72.5030202@cran.org.uk> <20111022161242.11803f76.freebsd@edvax.de> In-Reply-To: <20111022161242.11803f76.freebsd@edvax.de> Date: Sat, 22 Oct 2011 17:10:44 +0200 Message-ID: <000f01cc90cc$c8c0abe0$5a4203a0$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcyQxLWA17wzeE2/RjC80/VE0A1/agABZtng Content-Language: sv X-Virus-Scanned: clamav-milter 0.97.3 at odin.thorshammare.org X-Virus-Status: Clean X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=ham version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on odin.thorshammare.org Cc: freebsd-questions@freebsd.org Subject: SV: Breakin attempt X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Oct 2011 15:11:00 -0000 -----Oprindelig meddelelse----- Fra: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org] P=E5 vegne af Polytropon Sendt: den 22 oktober 2011 16:13 Til: Bruce Cran Cc: freebsd-questions@freebsd.org Emne: Re: Breakin attempt On Sat, 22 Oct 2011 15:08:50 +0100, Bruce Cran wrote: > I suspect that these sorts of attacks are fairly normal if you're=20 > running ssh on the standard port. I used to have lots of 'break-in=20 > attempts' before I moved the ssh server to a different port. Is there _any_ reason why moving from port 22 to something different is _not_ a solution? Reason why I'm asking: Moving SSH away from its default port seems to be a relatively good solution as break-in attempts concentrate on default ports. So in case a sysadmin decides to move SSH to a "hidden" location, what could be an argument against this decision? --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... Thank you all Polytropon, Matthias, Bruce and Michael for your answers. No, no reason at all to not change from port 22, and I will follow that advice. And my plan is to move away from password based ssh logins in the = future. I've been running this server for educational purposes for several = years, But this is first time I've had a "Break in attempt" going on for this = long time. It don't bother me more than cluttering up my logfiles, but I got = curious if this Attempt was originating from one person. All the Best to you all Hasse _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org"