Discuss

discuss@lists.centos.org

34758 discussions

protecting multiuser systems from bruteforce ssh attacks
by Eugene Vilensky 22 Aug '09

22 Aug '09

Hello, What is the best way to protect multiuser systems from brute force attacks? I am setting up a relatively loose DenyHosts policy, but I like the idea of locking an account for a time if too many attempts are made, but to balance this with keeping the user from making a helpdesk call. What are some policies/techniques that have worked for this list with minimal hassle? Thanks! -Eugene

10 11

how to check the MD5 sums ISO directory
by Michael Wright 22 Aug '09

22 Aug '09

Ok guys How do i check MD5 SUM in the ISO Directory Mike

3 2

ned help on downloading
by Michael Wright 22 Aug '09

22 Aug '09

Pentium(R) D CPU 2.80Ghz 3 GB of Ram 250 Gb harddrive i not sure if i'm downloading the right one here as my mechine runs on 1386 scale could someone help us ouit to see if i am downloading the right one Mike CentOS-5.3-i386-bin-DVD.iso

2 2

tar and gunzip help
by ML 21 Aug '09

21 Aug '09

HI All, I have a directory tree that when the user un-gzips/untars it does into /opt by default. The directory tree is like: ugui | |-- <misc files> |-- source |-----framework |------ <misc files> so when unzipped I want to end it with /opt/ugui and all the stuff below it. How do I do this? Can I also issue one command that will unzip and untar the archive at the same time? (I know I can, I just cant get it right) Thanks! -ML

5 4

CentOS 5.3 Anaconda nic device ordering
by Mark Watts 21 Aug '09

21 Aug '09

I have a bunch of HP BL465c G5 blades, with additional dual-port network adapters. The onboard interfaces use the bnx2 driver, while the expansion card uses tg3. All 4 interfaces are detected by both Anaconda and the installed system, but Anaconda is reversing the ordering: Anaconda: eth0 Card 2, Port 1 eth1 Card 2, Port 2 eth2 Card 1, Port 1 eth3 Card 1, Port 2 BIOS and Installed Kernel: eth0 Card 1, Port 1 eth1 Card 1, Port 2 eth2 Card 2, Port 1 eth3 Card 2, Port 2 The main problem I have is that the ifcfg-eth* files have the wrong HWADDR lines in them for the actual network cards. dmesg shows the interfaces in the correct order. I've tried, unsuccessfully to use the "device eth bnx2:tg3" syntax within my kickstart file, as suggested here: http://fedoraproject.org/wiki/Anaconda/NetworkIssues#Mixed_NIC_Cards_and_Dr… If I just use the device line in my kickstart, this doesn't appear to have any effect on the device ordering at all, and using "noprobe nonet" just stops anything from being detected at all. Is there any way to get anaconda to load the drivers in a different order on CentOS 5.3? Mark. -- Mark Watts BSc RHCE MBCS Senior Systems Engineer, Managed Services Manpower www.QinetiQ.com QinetiQ - Delivering customer-focused solutions GPG Key: http://www.linux-corner.info/mwatts.gpg

2 1

ssh-agent autostarting
by Dave 21 Aug '09

21 Aug '09

Hello, I'm trying to get public key authentication working on a client to server connection so i can drop passwords. I've got the keys in place and confirmed they are working. I'm now trying to set up ssh-agent, I read i can do it manually i was looking for a more automated method for users on login. This is not through a gui. Thanks. Dave.

3 2

Repo with bacula for centos 5.3
by For＠ll 21 Aug '09

21 Aug '09

Hi, I was look a yum repository with I add to centos 5.3, where I find bacula with version 2.4.4 or 2.4.4.1 For@ll

2 2

Re: [CentOS] protecting multiuser systems from bruteforce ssh attacks
by J.Witvliet＠MINDEF.NL 21 Aug '09

21 Aug '09

-----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Eugene Vilensky Sent: Thursday, August 20, 2009 10:15 PM To: CentOS mailing list Subject: [CentOS] protecting multiuser systems from bruteforce ssh attacks Hello, What is the best way to protect multiuser systems from brute force attacks? I am setting up a relatively loose DenyHosts policy, but I like the idea of locking an account for a time if too many attempts are made, but to balance this with keeping the user from making a helpdesk call. What are some policies/techniques that have worked for this list with minimal hassle? Hi Eugene, Depends on the number of users (as you mentioned "mutisuser" ) And how strong you want your system to be protected. If its not a couple of thousands, i would suggest: Disabling password-login alltogether, and use keys only. On the other hand, you can also demand that all connection must be made by using a vpn-connection (openvpn/ipsec). After that you can be assured that any attempt is from a local user. Both are a much stronger protection than allow/deny or firewall-mechanisms Hans ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

1 0

drbd xen question
by Coert Waagmeester 21 Aug '09

21 Aug '09

Hello all, I am running drbd protocol A to a secondary machine to have 'backups' of my xen domUs. Is it necessary to change the xen domains configs to use /dev/drbd* instead of the LVM volume that drbd mirrors, and which the xen domU runs of? regards, Coert

4 6

Running UML on CentOS?
by Dave 21 Aug '09

21 Aug '09

Hello, I've got a CentOS 5.3 machine that i'd like to virtualize some services on. Currently a reinstall for virtualization isn't doable so i thought about user-mode-linux, UML. Has anyone run this on Centos5? If so, feedback prose and cons appreciated. Thanks. Dave.

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss