RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
I got this working. The issue was that the service install command listed the pid file, but so does the config. Also, the /etc/host.deny did not exist. Again, thanks so much for your help Kyle -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http:/

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
Yes, reading the readme file, I found that the pid file name. I changed it to the normal path /var/run/denyhost.pid But when it starts it stall says the same error: DenyHosts could not obtain lock (pid: ) [Errno 2] No such file or directory: '/var/lock/subsys/denyhosts' I change the -x option

Re: Stop Brute Force Attack on SSH

2008-02-17 Thread René Berber
Kyle A. Dawson wrote: Sorry, my mistake. I created a script, and the file had windows new lines... I always forget that with TextPad. But I did read the readme and now I have these files: denyhosts.cfg daemon-control So the install/config seem to work. When I start this I get error (/var

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
CTED] On Behalf Of René Berber Sent: Sunday, February 17, 2008 9:10 PM To: cygwin@cygwin.com Subject: Re: Stop Brute Force Attack on SSH Kyle A. Dawson wrote: > The install worked great. But when I try to create the service: > > cygrunsrv -I DenyHosts -p /usr/share/denyhosts/daemon-contro

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
Message- From: René Berber [mailto:[EMAIL PROTECTED] Sent: Sunday, February 17, 2008 9:03 PM To: Kyle A. Dawson Subject: Re: Stop Brute Force Attack on SSH Kyle A. Dawson wrote: > The install worked great. But when I try to create the service: > > cygrunsrv -I DenyHosts -p /usr/sha

Re: Stop Brute Force Attack on SSH

2008-02-17 Thread René Berber
Kyle A. Dawson wrote: The install worked great. But when I try to create the service: cygrunsrv -I DenyHosts -p /usr/share/denyhosts/daemon-control -a start -d DenyHosts -f "DenyHosts 2.6" -y sshd -x /var/run/denyhosts.pid -o I get this: cygrunsrv: unknown option -- Also, this does not exis

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
/denyhosts/daemon-control -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of René Berber Sent: Sunday, February 17, 2008 7:53 PM To: cygwin@cygwin.com Subject: Re: Stop Brute Force Attack on SSH Kyle Dawson wrote: > How can I stop attacks on my ssh d

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
That is what I was looking for. I will try this tonight, thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of René Berber Sent: Sunday, February 17, 2008 7:53 PM To: cygwin@cygwin.com Subject: Re: Stop Brute Force Attack on SSH Kyle Dawson wrote

Re: Stop Brute Force Attack on SSH

2008-02-17 Thread René Berber
Kyle Dawson wrote: How can I stop attacks on my ssh demon? I see thousands of attempts every day. I have, I believe good password policy but since I have clients, not 100% sure. Is there some config that I can set? One ip address comes in and tries for a day or so. Can it see that it is

RE: Stop Brute Force Attack on SSH

2008-02-17 Thread Kyle A. Dawson
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Chu Sent: Sunday, February 17, 2008 7:08 PM To: cygwin@cygwin.com Subject: Re: Stop Brute Force Attack on SSH Kyle Dawson wrote: > How can I stop attacks on my ssh demon? I see thousands of attempts ev

Re: Stop Brute Force Attack on SSH

2008-02-17 Thread Howard Chu
Kyle Dawson wrote: How can I stop attacks on my ssh demon? I see thousands of attempts every day. I have, I believe good password policy but since I have clients, not 100% sure. Is there some config that I can set? One ip address comes in and tries for a day or so. Can it see that it is t

Re: Stop Brute Force Attack on SSH

2008-02-17 Thread Adam Thompson
On 18/02/2008, Kyle Dawson <[EMAIL PROTECTED]> wrote: > How can I stop attacks on my ssh demon? I see thousands of attempts every > day. I have, I believe good password policy but since I have clients, not > 100% sure. Is there some config that I can set? One ip address comes in > and tries