inbound ssh ceased on 4 servers at same time

Marcin Jessa lists at yazzy.org
Thu Jun 9 13:39:00 GMT 2005


Hi John, guys.

On Sat, 4 Jun 2005 13:14:28 -0500
"John Brooks" <john at day-light.com> wrote:

> Thanks, sounds good to do on the outward facing firewall. These
> four freebsd boxes are protected behind an openbsd firewall so
> none of the brute-force sshd attacks have ever reached them.

How do you filter those brute-force attacks? 
Do you check existence of users on the actual server running sshd ?
I get hundreds of those attacks every day.

Cheers,
Marcin Jessa.


More information about the freebsd-isp mailing list