Messages in this thread | | | Date | Mon, 03 Oct 2011 11:28:57 +0200 | From | Maarten Lankhorst <> | Subject | Re: kernel.org status: hints on how to check your machine for intrusion |
| |
On 10/01/2011 11:30 PM, Henrique de Moraes Holschuh wrote: > Hmm, and a last tip: > > Always use the "AllowUsers" or "AllowGroups" directive in sshd_config to > only allow access to whitelisted users/groups and deny to every other user > (including system ones). > Also nice is a dumb iptables filter with the recent match. 2 lines total. http://www.linux-noob.com/forums/index.php?/topic/1829-ssh-rate-limit-per-ip-new-method/
But denyhosts does blacklisting for sshd automatically. :) http://denyhosts.sourceforge.net/faq.html
~Maarten
| |