19 Sep
2007
19 Sep
'07
3:58 p.m.
David Hrb?c( hrbac.conf@seznam.cz wrote:
Bazy napsal(a):
And yes... I will use layer 7 filtering. http://l7-filter.sourceforge.net/protocols
Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto ssh -j DROP" ;)
Yes, the only way. D.
Silly question. If you're just going to drop all ssh connection attempts, wouldn't it be easier to just not start sshd? Ditto for telnet, etc? No service means nothing to connect to.
Cheers, Dave
--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce