Re: [CentOS] protecting multiuser systems from bruteforce ssh attacks

Hi,

fail2ban is good choice, not only for ssh.

bye On 20.8.2009, at 23:31, Kai Schaetzl wrote:

Eugene Vilensky wrote on Thu, 20 Aug 2009 15:14:58 -0500:

...

What is the best way to protect multiuser systems from brute force attacks? I am setting up a relatively loose DenyHosts policy, but I like the idea of locking an account for a time if too many attempts are made, but to balance this with keeping the user from making a helpdesk call.

Google for SSH rate-limiting.

Kai

-- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Hodja Nasredin nasredin@sutra.cz