intrusion detected

[Albin Blaschka]

Matt Patterson schrieb:
> I should have thought of that. I do have a seperate firewall and port 22 
> is the only one open to the outside world, but I have noticed a lot of 
> interest in that port from my auth log. I have thought about changing 
> ports but havent bothered because I use a good password on the only real 
> username, root is disabled through ssh, and no other username is allowed 
> an interactive login.
> 

Hello,

I, personnally, have changed the port on my server for ssh, even with 
root disabled and good passwords - the log file grew quite big (several 
hundreds kilobytes per day) with such unsuccessful break-in attempts, it 
became much "noise", where it was difficult to spot any "real" 
problems... no it's all so quiet ;-)

wishes,
Albin

-- 
---------------------------------------------------------------------
| Albin Blaschka, Mag. rer.nat
| Fachbereich für Organismische Biologie, Universität Salzburg
| Hellbrunnerstr. 34, A - 5020 Salzburg, Österreich
|
| It's hard to live in the mountains, hard, but not hopeless!
---------------------------------------------------------------------