[CentOS] filtering ssh regardless of the port
David G. Miller
dave at davenjudy.orgWed Sep 19 13:58:44 UTC 2007
- Previous message: [CentOS] filtering ssh regardless of the port
- Next message: [CentOS] filtering ssh regardless of the port
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
David Hrb?c( <hrbac.conf at seznam.cz> wrote: > Bazy napsal(a): >> > And yes... I will use layer 7 filtering. >> > http://l7-filter.sourceforge.net/protocols >> > >> > Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto >> > ssh -j DROP" ;) >> > > Yes, the only way. > D. Silly question. If you're just going to drop all ssh connection attempts, wouldn't it be easier to just not start sshd? Ditto for telnet, etc? No service means nothing to connect to. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce
- Previous message: [CentOS] filtering ssh regardless of the port
- Next message: [CentOS] filtering ssh regardless of the port
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list