l i n u x - u s e r s - g r o u p - o f - d a v i s
Next Meeting:
July 7: Social gathering
Next Installfest:
Latest News:
Jun. 14: June LUGOD meeting cancelled
Page last updated:
2008 Dec 04 07:34

The following is an archive of a post made to our 'vox mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox] [fwd] ssh "attacks" - distributed slow scans - notexactly "news", but?for the curious ...
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox] [fwd] ssh "attacks" - distributed slow scans - notexactly "news", but?for the curious ...

On Wed, Dec 03, 2008 at 11:37:10AM -0800, Scott Miller wrote:
> What are your thoughts on using /etc/hosts.deny to block ssh access
> from entire geographical regions? I ran across this post which is very
> curious:
> http://nukecops.com/postp172318.html#172318

A buddy admin that was helping me out for awhile put in some of those. He did it almost automatically and didnt even think it worth mentioning to me.

Pros and Cons. It DID cut the attacks way down. But it also created a situation later where some people on the forums I frequent were unable to get some of the support files that I placed on my site. It took me awhile to realize why.

Now I removed all of those mega blocks. I only block an occassional IP. In fact, I have watched attacks that took days on my machine and have just let it run. Unless it causes me a load problem I dont block anymore. I figure they might as well waste their time on my box rather than move on to someone more vulnerable who might not watch the activity as closely.

Gandalf  Parker
vox mailing list

LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.