SSH and the Ubuntu Server

Scott Kitterman ubuntu at kitterman.com
Thu Nov 18 15:44:20 UTC 2010


On Thursday, November 18, 2010 04:21:42 am sam tygier wrote:
> On 17/11/10 21:38, Dustin Kirkland wrote:
> > This proposal requests that:
> >   1) a new prompt be added to the Ubuntu Server installer
> >   2) this prompt be dedicated to the boolean installation, or
> > 
> > non-installation, of the SSH service, as an essential facet of a
> > typical server
> > 
> >   3) the cursor highlights the affirmative (yes, please install SSH),
> > 
> > but awaits the user's conscious decision
> 
> you could make the ssh server recommend denyhosts or fail2ban (both prevent
> brute force attacks by blocking hosts that make to many failed login
> attempts)

No.  This is a bad idea.  There are too many different ways to solve this 
problem (and IMO these are not the most robust) to impose a default on the 
user.

Scott K




More information about the ubuntu-server mailing list