[nflug] Blocking out unwanted guests...

[David J. Andruczyk]

you could always use port kncking to open the port on demand, thus making it invisible to most portscans..    analagous to a secret knock o na door in order t ogain entry.  if you don't know the secret knock you don't get a response..
It can be as simple as a 1 port knock on a specific powrt number or as complex as you desire.

google "port knocking",  there are several howtos with how to set it up with firewalls like shorewall (my favorite)

 
-- David J. Andruczyk

----- Original Message ----
From: Robert Wolfe <robert at niagara-panux.com>
To: nflug at nflug.org
Sent: Sunday, January 6, 2008 11:27:57 AM
Subject: [nflug] Blocking out unwanted guests...


Good morning everyone!

Woke up this morning to emails from logwatch showing over a hundred 
unauthorized ssh login attempts to my box this morning (all from the 
same IP).  I am wondering if there is any way, using the hosts.deny 
file, that I can block out individual IP addresses from accessing my
 box 
at all?

Thanks!

_______________________________________________
nflug mailing list
nflug at nflug.org
http://www.nflug.org/mailman/listinfo/nflug






      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.nflug.org/pipermail/nflug/attachments/20080106/ff508706/attachment.html