David Hrb?c( <hrbac.conf@xxxxxxxxx> wrote:
Bazy napsal(a):
> And yes... I will use layer 7 filtering.
> http://l7-filter.sourceforge.net/protocols
>
> Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto
> ssh -j DROP" ;)
Yes, the only way.
D.
Silly question. If you're just going to drop all ssh connection
attempts, wouldn't it be easier to just not start sshd? Ditto for
telnet, etc? No service means nothing to connect to.
Cheers,
Dave
--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
