20 Aug
2009
20 Aug
'09
11:31 p.m.
Eugene Vilensky wrote on Thu, 20 Aug 2009 15:14:58 -0500:
What is the best way to protect multiuser systems from brute force attacks? I am setting up a relatively loose DenyHosts policy, but I like the idea of locking an account for a time if too many attempts are made, but to balance this with keeping the user from making a helpdesk call.
Google for SSH rate-limiting.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com