<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=Big5" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Tom Spec wrote: <blockquote cite="mid200766.91330.qm@web88212.mail.re2.yahoo.com" type="cite"> <style type="text/css"></style> <div style="font-family: verdana,helvetica,sans-serif; font-size: 10pt;"> <div>What do you mean by "solution"? Do you want to stop people from logging in when they have the correct password?<br> <br> You should make your passwords strong enough so that people cannot (easily) guess/hack them.<br> Don't allow people to log in as root remotely.<br> You can limit where people can log in from by using iptables.<br> <br> Tom<br> </div> </div> </blockquote> <font size="-1">If there is ssh-telnet service for user...<br> Then is there a solution to fix the problem of hack ( although someone who know the user's password, but they can't modify / delete any profile files, so the user who can login to the server nect time again ) ?<br> eg : limit user profile ( user account ) ?<br> if so, how to do this ?<br> <br> Edward.<br> </font> </body> </html>