Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 May 2008 19:46:30 +0100
From:      Mike Clarke <jmc-freebsd@milibyte.co.uk>
To:        freebsd-questions@freebsd.org
Subject:   Re: Renaming "root" to "homer"?
Message-ID:  <200805301946.30967.jmc-freebsd@milibyte.co.uk>
In-Reply-To: <200805301748.m4UHmc6Q020790@lurza.secnetix.de>
References:  <200805301748.m4UHmc6Q020790@lurza.secnetix.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Friday 30 May 2008, Oliver Fromme wrote:

> Another idea would be to move sshd from the default port
> to a non-standard port, e.g. 222 or whatever. =A0Typically
> ssh brute force attacks target port 22 only. =A0This will
> also clear your logs from useless break-in attempts.

/usr/ports/security/denyhosts is quite good for permanently blocking=20
access from IP's that make suspicious ssh probes. It reduces garbage in=20
the logs too because after a remote address gets blocked future probes=20
from it get rejected before they even get as far as being logged.

=2D-=20
Mike Clarke



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805301946.30967.jmc-freebsd>