Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | shutting down dictionary attacks |
|---|---|
| Date: | Sat, 2 Jul 2005 09:47:59 -0400 |
I run OpenBSD 3.7 with OpenSSH 4.1, and found that even with:
PermitRootLogin no
PasswordAuthentication no
Protocol 2
ChallengeResponseAuthentication no
Using OpenSSH or Putty from test PCs, I couldn't supply a password, but the
script kiddies were still finding a way to make password attacks. Obviously,
their skills are certainly better than mine.
Searching The Fine Archive, I found
http://marc.theaimsgroup.com/?l=secure-shell&m=109755336414758&w=2
which suggests
PAMAuthenticationViaKbdInt no
as an additional config setting. It's not applicable to OpenSSH 4.1
on OpenBSD. But, poking through sshd(8) I found:
KerberosOrLocalPasswd no
After adding that to my config, it *seems* like my attacks may have
been stopped. At least, they're no longer being logged.
Any thoughts on whether this change will be effective, or if this was just
serendipitous?
-Josh Grosse-
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | FW: No longer can connect, Nathan Zabaldo |
|---|---|
| Next by Date: | Re: FW: No longer can connect, Andrew Haninger |
| Previous by Thread: | X apps only work after second login, David Minor |
| Next by Thread: | Re: shutting down dictionary attacks, Josh Grosse |
| Indexes: | [Date] [Thread] [Top] [All Lists] |