Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Admins warned of brute-force SSH attacks
Robert Lemos, SecurityFocus 2008-05-14

Allowing secure shell access to a server tends to attract the occasional attempt to guess a valid username and password for the service. However, a spike in attacks this week has system administrators worried.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Re: Admins warned of brute-force SSH attacks 2008-05-19
Anonymous
...and here's how to do it on OpenBSD with pf:

table scanners persist file "/etc/scanners"

[...]

block in quick log on $ext_if proto tcp from scanners to $ext_if port ssh

[...]

pass in on $ext_if proto tcp from any to $ext_if port ssh flags S/SA keep state (max-src-conn-rate 3/60, overload sc...

[ more ]  





 

Privacy Statement
Copyright 2008, SecurityFocus