[CentOS] protecting multiuser systems from bruteforce ssh attacks

Thu Aug 20 21:31:23 UTC 2009
Kai Schaetzl <maillists at conactive.com>

Eugene Vilensky wrote on Thu, 20 Aug 2009 15:14:58 -0500:

> What is the best way to protect multiuser systems from brute force
> attacks?  I am setting up a relatively loose DenyHosts policy, but I
> like the idea of locking an account for a time if too many attempts
> are made, but to balance this with keeping the user from making a
> helpdesk call.

Google for SSH rate-limiting.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com