Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 22 May 2005 08:45:04 -0400
From:      John DeStefano <john.destefano@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   securing SSH, FBSD systems
Message-ID:  <f2160e0d05052205454e6071d5@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
I have broached this subject before, also searched the archives & web
for a solution, but no real, clear answer for those who are not
already gurus in the subject.

I've had light-to-moderate records of attempted SSH break-ins to my
system in the past.  Over the past week, I have had daily security
records ranging in size from 10kb-120kb in size (the average for a
"clean" record with no break-in activity is 2kb), with different IPs
and ranges bein used, which leads me to believe multiple "kiddies" (or
perhaps more sophisticated attackers) are somehow sniffing out my
system and honing in for repeasted attacks.

Would someone mind briefly talking about securing FBSD systems from
such attacks, at least in a manner that's a bit more extensive and
detailed than just saying "use Snort"?  I'm not a newbie to FBSD, but
I'm not a *NIX guru either.  I'd really appreciate your help.

Thanks,
John



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?f2160e0d05052205454e6071d5>