<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> <a class="moz-txt-link-abbreviated" href="mailto:k12osn-request@redhat.com">k12osn-request@redhat.com</a> wrote: <blockquote cite="mid:20070505160021.C542274DC1@hormel.redhat.com" type="cite"> <pre wrap=""> Message: 1 Date: Sat, 5 May 2007 12:10:03 +0200 From: Nils Breunese <a class="moz-txt-link-rfc2396E" href="mailto:nils@breun.nl"><nils@breun.nl></a> Subject: Re: [K12OSN] Help: System intrusion through ssh and a weak password To: "Support list for open source software in schools." <a class="moz-txt-link-rfc2396E" href="mailto:k12osn@redhat.com"><k12osn@redhat.com></a> Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:F470FC43-A45D-4E16-8F4F-72DE5F9C2385@breun.nl"><F470FC43-A45D-4E16-8F4F-72DE5F9C2385@breun.nl></a> Content-Type: text/plain; charset="us-ascii" Op 5-mei-2007, om 8:53 heeft Nadav Kavalerchik het volgende geschreven: </pre> <blockquote type="cite"> <pre wrap="">we're using freenx through ssh to remote control all the school that are installed with ltsp what we did is moved the ssh port somewhere high in the port list, it solved all the "scanning" and trying to "break in" log entries that we used to see in the log file :-) (i wonder how long it will last) </pre> </blockquote> <pre wrap=""> I like to setup SSH keys, disable PasswordAuthentication and install something like Fail2Ban or DenyHosts. That should keep them out and keep your logs from growing like mad. Nils Breunese. </pre> </blockquote> I use also use fail2ban (<a class="moz-txt-link-freetext" href="http://sourceforge.net/projects/fail2ban">http://sourceforge.net/projects/fail2ban</a> ), which scans the system logs and when someone gets a password wrong X number of times in Y time period, their IP address is blocked for Z ammount of time. I use it on a debian machine, and there is a package, but it can be used on other flavors of Linux as well. Sam <a class="moz-txt-link-freetext" href="http://www.onlinegrades.org/">http://www.onlinegrades.org/</a> - Free software for securely posting student grades online </body> </html>