baslinux AT lists.ibiblio.org
Subject: Baslinux mailing list
List archive
- From: Stephen Clement <s.clement AT sympatico.ca>
- To: baslinux AT lists.ibiblio.org
- Subject: Re: [BL] HTTPD
- Date: Wed, 16 Mar 2005 22:01:50 -0500
David Moberg wrote:
**snip-snip**
To give you a good idea of just how bad the situation is, i'll give you some real-world statistics, from my box. I run sshd on my desktop linux computer (BLAG 10000, it's a modern full-blown 1 CD distro). I have an always on Internet connection. ssh connections are allowed from anywhere, and I have root login disabled (but the scanners don't know this!)I really wouldn't recommend it. Really wouldn't.How about for 2 hours?What is the probability of someone else breaking into my computerIf you're dialed in for a minute or so, very small. If you stay connected
even if I am doing everything wrong (running telnetd and httpd,
going online as root, using telnet not ssh, etc.) when I am dialed
into the internet with BL3 or BL2?
for a year, very high.
Go on for 2 hours every day for a week, and I can almost guarantee that
someone
will have at least tested how secure your system is, if not tried to abuse it.
David
I have been scanned approximately 60 times in the past 3 days. I only get attacked about once a week, and the attackers have never been successful. By attacked, I mean mass-guessing passwords, 100+ times. Most scanners give up after 15 guesses or so. Note, this is only info about my SSH server, never mind my FTP server (the latest vsftpd).
So, 60 guesses divided by 72 hours is 0.83. That means, about once per 50 minutes. That's just plain scary. Setting up a telnet server considering how often people get scanned is just crazy. It's your decision.
Thanks,
Stephen Clement
-
Re: [BL] aliases and .xinitrc
, (continued)
-
Re: [BL] aliases and .xinitrc,
3aoo-cvfd, 03/15/2005
- Re: [BL] aliases and .xinitrc, sindi keesan, 03/15/2005
- Re: [BL] aliases and .xinitrc, 3aoo-cvfd, 03/15/2005
-
Re: [BL] aliases and .xinitrc,
3aoo-cvfd, 03/15/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
- Re: [BL] HTTPD, Stephen Clement, 03/16/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
- Re: [BL] HTTPD, 3aoo-cvfd, 03/17/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
-
Re: [BL] HTTPD,
Stephen Clement, 03/16/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
- Re: [BL] HTTPD, Stephen Clement, 03/16/2005
-
Re: [BL] HTTPD,
sindi keesan, 03/16/2005
- Re: [BL] HTTPD, sindi keesan, 03/16/2005
- Re: [BL] HTTPD, sindi keesan, 03/17/2005
- Re: [BL] HTTPD, Stephen Clement, 03/17/2005
- Re: [BL] HTTPD, sindi keesan, 03/17/2005
Archive powered by MHonArc 2.6.24.