Alan Dayley wrote:
>On Thursday 28 April 2005 06:33 am, Mike Hoy wrote:
>
>
>>Hi,
>>
>>i just set up a new server with FC3. after reading george toft's
>>presentation on security i thought it would be a good idea. i had
>>gentoo installed and probably it was being hacked all the time, i don't
>>know.
>>
>>today in my new install of FC3 i was told as root that i 'had new
>>messages', in /var/spool/mail/root
>>so i checked it out
>>somebody has been trying to ssh into my acct with all kinds of
>>usernames and apparently with no success. i'm told this is called ssh
>>hammering and i need to setup iptables. I need to get started on
>>tightening up security on this thing. My server runs a website and ssh
>>will need to be running.
>>my question: (i'm sure more to come)
>>I was told I can set ssh up so that root can only access ssh from
>>127.0.0.1. how do i go about doing that. also how can i make my
>>personal username have access to /whatever/apache/htdocs/* so I don't
>>have to be root to edit things.
>>
>>
>
>For ssh configuring, this looks like a pretty good guide:
>
>http://www.siliconvalleyccie.com/linux-hn/ssh-server.htm
>
>I have found that my dsl connection drops and changes my IP so much that
>doing RSA keys, while more secure, was too painful (How to is explained
>in the link above).
>
>The best thing I did to stop login hammering was move ssh operate on a
>high, non-standard port (also explained in the link above) instead of the
>default 22. Check the list of ports here:
>
>http://www.iana.org/assignments/port-numbers
>
>Choose one that is above 1024 and not used much or at all. Then you have
>to specify the port number when logging in remotely. Something like:
>
>ssh -p NNNN server.name
>
>Not too hard and the password hammers have stopped, at least for me.
>
>Alan
>---------------------------------------------------
>PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
>To subscribe, unsubscribe, or to change you mail settings:
>http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
>
thx alan actually i can't connect with ssh -p NNNN server.name
not sure why unless it's a dns thing. i have an ip only. so mine is ssh
-p NNNN user@ipaddress
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)