[CentOS] Re: Securing SSH

Scott Silva ssilva at sgvwater.com
Tue Mar 25 18:53:17 UTC 2008


on 3-25-2008 11:28 AM Tim Alberts spake the following:
> David Mackintosh wrote:
>> On Tue, Mar 25, 2008 at 09:48:17AM -0700, Tim Alberts wrote:
>>  
>>> So I setup ssh on a server so I could do some work from home and I 
>>> think the second I opened it every sorry monkey from around the world 
>>> has been trying every account name imaginable to get into the system.
>>>
>>> What's a good way to deal with this?
>>>     
>>
>> This is what I do.
>>
>> http://wiki.xdroop.com/space/Linux/Limited+SSH+Access
>>
>>   
> That sounds great for getting around a remote dynamic IP address, but 
> some more authentication/security on that web page is necessary, 
> otherwise, anyone who finds that web page is given access?
Not really. Anyone who finds that page is only allowed to try and "access" ssh 
port. You still need valid key/password and proper knowledge of the port.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos/attachments/20080325/c9addfc1/attachment.sig>


More information about the CentOS mailing list