Advanced

Got Security? You're in Denial

Posted by linuxmag on · 8 comments
Linux Magazine; By Ken Hess
Mail this story
Print this story

Exposing a system to the Internet means that you’ll soon (within hours) experience login attempts from random locations, from people you don’t know and from those with unclear motivations. DenyHosts is an SSH security tool in the form of a python script that helps prevent brute force and dictionary-based attacks against your systems. On my home system, I have at least one such attempt added to my /etc/hosts.deny file per day. I use DenyHosts to maintain that stealth watch over my insignificant system here in my dusty little corner of the Internet that I call home.

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (8)

Shamefully, I must confess to getting fooled into clicking on yet another Ken Hess piece.

Stay calm, and please avoid.
I read the teaser and laughed. I have PSAD enabled on my firewall so anyone that so much as starts a portscan gets an automatic 24 hour ip block. I am now using portknocking to protect my ssh port, so there's nothing there to brute force. :P

Oh sure, there's always a way someone can attack you. But there are plenty of ways to make it difficult enough that most would-be attackers wouldn't want to expend the effort.
[admission] Breaking My Oath ... [/admission]

First the title caught my eye, because yes, it speaks the truth.

Then I saw those foul words of attribution: Ken Hess to be properly repelled. So I knew there was Nothing There. Time to move on.

Finally I saw Linux Magazine and I was saddened.

What can I say? Well I guess it's back to the oath of silence.

Your Buddy Txt.
Shame on you, you prejudiced folk. Ken Hess is like Roy S. They write garbage at their own site but decent articles elsewhere. This article is a good tutorial on using DenyHosts. I've been using it for years and it works well.
I almost clicked ... almost.
Sander,

You are usually a credible, reliable source ... can we still trust you? Hans used to say something similar, however, uncharacteristically he could not cite a real article.

Have you too decided to take up Shilling as a side line? Stop it! I cannot stand the competition. There have been too many bounced checks without others trying to take a portion of my puny business. So step aside and let someone like me with no ethics or scruples perform the tasks Business needs. You are a skilled, talented technical person, so stay honest and please stay out my Pig sty.

Your Buddy Txt.
No this is an article by Ken Hess that is actually worth the read. It's a very good article. I don't know why he bothers writing such cr@p on the other blog site.
If it were his normal, uh, stuff, it'd be on his own site, not Linux Mag.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post