Re: protecting multiuser systems from bruteforce ssh attacks

[Kai Schaetzl <maillists@xxxxxxxxxxxxx>]

Eugene Vilensky wrote on Thu, 20 Aug 2009 15:14:58 -0500:

> What is the best way to protect multiuser systems from brute force
> attacks?  I am setting up a relatively loose DenyHosts policy, but I
> like the idea of locking an account for a time if too many attempts
> are made, but to balance this with keeping the user from making a
> helpdesk call.

Google for SSH rate-limiting.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos