Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Click here to return to the '10.4: Disable ssh password login under Tiger' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.4: Disable ssh password login under Tiger
Authored by: wgscott on Aug 19, '05 09:56:12AM

I put a huge dent in the script kiddie's fun with just these two precautions:

1. Put an "AllowUsers" line at the bottom of /etc/sshd_conf with only those user's names that need to log in. Then try logging in as someone else. You will see that ssh just hangs, instead of failing immediately. This makes those scripts highly inefficient, and they go elsewhere real fast.

2. Make certain root is disabled.

I worry about turning pam off.

[ Reply to This | # ]
a small correction...
Authored by: macubergeek on Aug 19, '05 02:38:11PM

correct file to edit /etc/sshd_config
and yes it hangs but after you enter the password.

[ Reply to This | # ]