Re:SSH Brute Force – The 10 Year Old Attack That Still Persists
by swinglock on Monday July 15, 2013 @03:49PM
(#6048123)
If you must then just limit connections per minute that can be opened per address to the sshd port in the host firewall instead. Sshd should be configured to close the connection after a number of failed logins. Now you get the same effect without a daemon parsing logfiles.
[ Parent
| on HN ]
Re:SSH Brute Force – The 10 Year Old Attack That Still Persists
by bradleyland on Tuesday July 16, 2013 @10:04AM
(#6051903)
I recently added UFW configuration to my provisioning scripts, so we now use UFW's 'limit' rules to do that on the port we use for SSH. We could probably get away with moving it back to the default with this in place.