Even SSH has its faults if you are not careful. Things I have done to my SSH server to help secure it:
Run it on a non-standard port. Preferably in the high range so that at least the cheesy port scanners and lame *** kiddie scripts don't see it.
Disable the root login. OpenSSH has it enabled by default.
Add the following lines to your hosts.deny file:
ALL: kornet.net
ALL: pubnet.kr
A TON of SSH scans and HTTPD exploits orginate from those two domains.
If you use password authentication. USE SECURE PASSWORDS!!! At least 8 characters long, NOT a word, at least ONE special character, mix of upper-case and lower-case letters, and at least ONE numerical character.
__________________ Computer specs:
----------------------------------
Dell XPS 1530
Centrino 7500 2.2Ghz
GeForce 8600GT
120GB/2GB |