NewInstance

I just posted last tip Improving security on OpenSSH, in wich I thought about a way to tell SSH daemon to black list host responsibles of too many fail login attempts. After some googling I found this: pam_abl. I tryied it, but had no chance to make it work as I need: I disabled PAM [...]

After just one day that I am leaving my linux server online, I've detected intrusions checking logs (/var/log/auth.log). Here you find how an intrusion attempt looks like: ... Aug 31 23:21:25 localhost sshd[4558]: User root not allowed because not listed in AllowUsers Aug 31 23:21:28 localhost sshd[4560]: Illegal user admin from ::ffff:206.113.121.118 Aug 31 23:21:31 [...]