Preventive Measures to Block SSH Attacks - Final Thoughts
(Page 4 of 4 )
By now you are familiar with most SSH attacks and how to prevent them. You can almost always consider that 99.99% of the attempts are either dictionary-based or simply brute-forcing tries. So simple rules that count these failed attempts or watch the logs are often truly effective; simultaneously, also opting for sophisticated RSA public/private key login authentication will give you the peace of mind.
In the near future we will publish an upcoming part to this article that will overview DenyHosts, explain how to set it up, and configure it appropriately. It is an amazing tool to work with and really modular. On the other hand, chances are we’re going to be bombarded with requests to write about that SSH Port Knocking strategy, so keep your eyes on Codewalkers since an advanced segment of this article is scheduled.
Until then, just be safe and take care of your SSH daemons. System administrators aren’t happy when they find 46,829 failed login attempts on an early Monday morning. Using our tried-and-proven security tips you can eliminate most SSH attacks with up to 99%+ efficiency. These percentages are based on hands-on experience.
In closing, I’d like to invite you to join our community of technology professionals experienced in all areas of IT&C starting from software and hardware up to consumer electronics at Dev Hardware Forums. Also, be sure to check out the community of our sister site at Dev Shed Forums. We are friendly and we’ll do our best to help you.
| DISCLAIMER: The content provided in this article is not warranted or guaranteed by Developer Shed, Inc. The content provided is intended for entertainment and/or educational purposes in order to introduce to the reader key ideas, concepts, and/or product reviews. As such it is incumbent upon the reader to employ real-world tactics for security and implementation of best practices. We are not liable for any negative consequences that may result from implementing any information covered in our articles or tutorials. If this is a hardware review, it is not recommended to open and/or modify your hardware. |
