Re: annoying brute force attack attempt using ssh

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



"jeff emminger" <jemminger@xxxxxxxxx> writes:
> isn't password authentication insecure?  why not set
> "PasswordAuthentication no" and use ssh keys, and maybe port-knocking
> too

My feeling exactly.  You have no control over how stupid a password
users will pick.  The only control you have is to not allow passwords
in the first place and insist on at least a 1k-bit (hopefully random)
key.

The "recent" iptables module takes care of the cpu loading and much of
the network loading caused by the ssh guessing attacks.

-wolfgang
-- 
Wolfgang S. Rupprecht                http://www.wsrcc.com/wolfgang/


-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux