unclug AT lists.ibiblio.org

Subject: UNC Linux Users Group

List archive

Re: [unclug] ssh via wireless...

From: Gary Bishop <gb AT cs.unc.edu>
To: UNC Linux Users Group <unclug AT lists.ibiblio.org>
Subject: Re: [unclug] ssh via wireless...
Date: Thu, 28 Feb 2008 09:51:46 -0500

I'm very happy with my configuration using firestarter. I set things up to only allow connections from campus machines and my home using very simple rules on the policy tab. I allow connections from host:
152.2.0.0/16
152.19.0.0/16
152.23.0.0/16
66.57.77.0/24

This eliminated attacks on my Ubuntu machine. If I ever need to connect from elsewhere, I'll connect to one of the open departmental machines first.

gb

Cristóbal Palmer wrote:

On Wed, Feb 27, 2008 at 05:10:29PM -0500, Scott Zentz wrote:

but it's still an attack and eventually someone will get in...

I can't praise it enough: denyhosts

http://denyhosts.sourceforge.net/

Cheers,

Re: [unclug] ssh via wireless... , (continued)
- Re: [unclug] ssh via wireless..., Scott Zentz, 02/27/2008
- Re: [unclug] ssh via wireless..., Andrew Perrin, 02/27/2008
  - Re: [unclug] ssh via wireless..., dsandif, 02/27/2008
  - Re: [unclug] ssh via wireless..., Brian Payst, 02/27/2008
    - Re: [unclug] ssh via wireless..., Cristóbal Palmer, 02/28/2008
    - Re: [unclug] ssh via wireless..., dsandif, 02/28/2008
      - Re: [unclug] ssh via wireless..., Scott Zentz, 02/28/2008
        
        Re: [unclug] ssh via wireless..., Greg Jansen, 02/28/2008
  - Re: [unclug] ssh via wireless..., Scott Zentz, 02/27/2008
    - Re: [unclug] ssh via wireless..., Cristóbal Palmer, 02/28/2008
      - Re: [unclug] ssh via wireless..., Gary Bishop, 02/28/2008
      - Re: [unclug] ssh via wireless..., dsandif, 02/28/2008
    - Re: [unclug] ssh via wireless..., hays, 02/29/2008
- Re: [unclug] ssh via wireless..., Cristóbal Palmer, 02/27/2008