Topic: failed ssh attempts (Blocking ip address)

[tko0383]

I'm having repeated failed ssh attempts on my box.is there anyway to automatically block the ip address after so many failed attempts? I'm running sme 7 beta 8.

Thanks.

~T.J.

[byte]

Maybe try...

http://no.longer.valid/phpwiki/index.php/Changing%20the%20default%20ssh%20port%20on%20SME%207

Someone esle may have a better way!

HTH

[raem]

tko0383

> I'm having repeated failed ssh attempts on my
> box.is there anyway to automatically block the ip > address after so many failed attempts?

Have you bothered to search the forums on ssh etc.
There are numerous posts and answers to your "issue". All the following have been recently posted so search.

1) Use the snort acid guardian contib (various posts and contribs available, search on snort acid guardian or look at cbharda contribs area. It will block access from a deemed offending IP for 24 hours.

2) Configure the sme server to only allow ssh from certain IP's. Search for a forum post by gordonr (Gordon Rowell)

3) Use public private keys and disable password access for ssh. A HOWTO exists by wellsi (Ian Wells).

[NickR]

Maybe try...
http://no.longer.valid/phpwiki/index.php/Changing%20the%20default%20ssh%20port%20on%20SME%207
Someone esle may have a better way!

"Better" is a subjective term, but I'm using this http://www.pkts.ca/ssh-faker.shtml which is incredibly flexible if you don't have a useage pattern which lends itself to using keypairs.

A certain amount of crafting of the /etc/hosts.allow template is required initially, but it's well worth it.

[wa4bro]

Maybe try...
http://no.longer.valid/phpwiki/index.php/Changing%20the%20default%20ssh%20port%20on%20SME%207
Someone esle may have a better way!

"Better" is a subjective term, but I'm using this http://www.pkts.ca/ssh-faker.shtml which is incredibly flexible if you don't have a useage pattern which lends itself to using keypairs.

A certain amount of crafting of the /etc/hosts.allow template is required initially, but it's well worth it.

How about a HowTo on crating the template. This looks interesting. Did you install by rpm?

[NickR]

How about a HowTo on crating the template. This looks interesting. Did you install by rpm?

The crafting I had in mind was that many of the servers I admin are remote & so I wanted a cast-iron guarantee that I could SSH from my own netblock.  I will have a go at a small howto.  I installed from RPM.

[wa4bro]

How about a HowTo on crating the template. This looks interesting. Did you install by rpm?

The crafting I had in mind was that many of the servers I admin are remote & so I wanted a cast-iron guarantee that I could SSH from my own netblock.  I will have a go at a small howto.  I installed from RPM.

I am sure a lot of folks here will be interested.

Thanks