SSH monitoring

[Emmanuel Seyman]

On Mon, Sep 05, 2005 at 08:25:36AM -0700, CHAT KHODA wrote:
> 
> 1- Monitor all of the connections(or tries) to my SSH
> port including the source IP address.

OpenSSH logs username, remote address and means of authentification
to /var/log/secure. Is this enough?

> 2- Limit the numer of unsuccessfull attempts to login
> to just two attempts per session.

Edit the file /etc/ssh/sshd_config and set the argument to MaxAuthTries to 2.

Emmanuel