Re: [SLE] problems with ssh

From: Leendert Meyer (leen.meyer_at_home.nl)
Date: 03/14/05

  • Next message: Ed Harrison: "Re: [SLE] gnome/nautilus/tree view"
    To: suse-linux-e@suse.com
    Date: Mon, 14 Mar 2005 19:54:02 +0100
    
    

    On Monday 14 March 2005 17:25, Stan Glasoe wrote:
    > On Monday 14 March 2005 10:01 am, Leendert Meyer wrote:
    > > Why a second firewall? That make things (IMO) unnecessarily complicated.
    > > You have proven that. ;) But it is possible that I am completely wrong
    > > about this... ;)
    >
    > Layered security approach. The small SOHO/home firewall/routers can help
    > deflect curious crackers and malicious bots. Bad stuff doesn't see a
    > Windows machine, they move on. NEVER rely on it but it does help.
    ...
    > port forward
    ...
    > For ssh ALWAYS (and probably most other basic services) choose a different
    > external port than 22 and greater than 1024. Its amazing how many hits you
    > get on that once you open it up from automated cracker bots testing what
    > they hope are common UserIDs and if that works, common passwords.

    Yup, I know. But never thought of changing the default port (although I knew
    the possibility). Actually I thought of giving the perpetrators the tarpit
    treatment.

    > Stan

    Thanks, Stan, much appreciated.

    Cheers,

    Leen

    -- 
    Check the headers for your unsubscription address
    For additional commands send e-mail to suse-linux-e-help@suse.com
    Also check the archives at http://lists.suse.com
    Please read the FAQs: suse-linux-e-faq@suse.com
    

  • Next message: Ed Harrison: "Re: [SLE] gnome/nautilus/tree view"