Mailinglist Archive: opensuse-security (138 mails)
| < Previous | Next > |
RE: [suse-security] Openssh + security
- From: "Admin" <admin@xxxxxxxxxxxxxxxxx>
- Date: Mon, 12 Dec 2005 18:04:54 -0000
- Message-id: <012201c5ff46$8e217c80$709da8c0@avon>
A more amusing alternative is to move SSH to another port, and put the
LaBrea tarpit on port 22 and any other commonly attacked ports (firewall
module).
Amusing but probably a bit irresponsible towards people who get to that port
on your machine by accident.
> -----Original Message-----
> From: Jaime Santos [mailto:jesantos@xxxxxxxxxxxxxxxxxxxx]
> Sent: Monday, December 12, 2005 5:17 PM
> To: suse-security@xxxxxxxx
> Subject: Re: [suse-security] Openssh + security
>
> Hi Bruno,
>
> That is correct, portsentry which drops any address from
> which a portscan is attempted into the hosts to be denied by
> the firewall, was, I believe, discontinued.
> This checked for portscans
> on all ports, not just port 22.
>
> I would also be interested to know if there is an updated
> alternative tool.
>
> Thanks. Best, Jaime.
>
LaBrea tarpit on port 22 and any other commonly attacked ports (firewall
module).
Amusing but probably a bit irresponsible towards people who get to that port
on your machine by accident.
> -----Original Message-----
> From: Jaime Santos [mailto:jesantos@xxxxxxxxxxxxxxxxxxxx]
> Sent: Monday, December 12, 2005 5:17 PM
> To: suse-security@xxxxxxxx
> Subject: Re: [suse-security] Openssh + security
>
> Hi Bruno,
>
> That is correct, portsentry which drops any address from
> which a portscan is attempted into the hosts to be denied by
> the firewall, was, I believe, discontinued.
> This checked for portscans
> on all ports, not just port 22.
>
> I would also be interested to know if there is an updated
> alternative tool.
>
> Thanks. Best, Jaime.
>
| < Previous | Next > |