Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Mar 2005 08:53:18 +0100 (CET)
From:      Stevan Tiefert <stevan@rot-1.de>
To:        "Eugene M. Minkovskii" <emin@mccme.ru>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sshd
Message-ID:  <20050302085135.B23556@mail.rot-1.de>
In-Reply-To: <20050302074659.GA22958@mccme.ru>
References:  <20050302075507.P23359@mail.rot-1.de> <20050302074659.GA22958@mccme.ru>

next in thread | previous in thread | raw e-mail | index | archive | help



On Wed, 2 Mar 2005, Eugene M. Minkovskii wrote:

> On Wed, Mar 02, 2005 at 08:00:13AM +0100, Stevan Tiefert wrote:
> " Hello list,
> "
> " when I am watching the /var/log/auth.log I see many missed logins from
> " IP-addresses I never tried to login from. Am I right that they is a hacker
> " trying to login on my mashine, because he was using loginnames I never
> " created on my mashine like patrick, lydia, green, admin, and so on...?
> "
> " With regards
> " Stevan Tiefert
>
> It seems to you are right. If you know that you go to you mashine
> only from one or two IP, you can write it in your firewall. For
> example, if you use ipfw:
>
> ext_if=rl0
> trusted_ip=1.2.3.4,3.4.2.1
> ipfw add allow tcp from $trusted_ip to me ssh in recv $ext_if
> ipfw add allow tcp from me ssh to $trusted_ip out xmit $ext_if
>
> Or something else.
>
>
> " _______________________________________________
> " freebsd-questions@freebsd.org mailing list
> " http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> " To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>
> --
> Sensory  yours, Eugene  Minkovskii
> Сенсорно ваш,   Евгений Миньковский
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>

Thanks Eugene, but I can not close myself out with a firewall. I need the
access to my system over the internet. Am I right that in this case, only
a good password is protecting me?

With regards
Stevan Tiefert



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050302085135.B23556>