Re: Debian SSH server configuration

2006-04-26 Thread Digby Tarvin
On Wed, Apr 26, 2006 at 05:13:42PM -0400, Ralph Katz wrote: > You wrote: > > A quick check of my system log shows 1514 failed ssh attempts in the > > last four days. > > That almost goes away with fail2ban. Works with sarge, too, (though I > haven't yet upgraded from fail2ban 0.6.0-3.) > > Rega

Re: Debian SSH server configuration

2006-04-26 Thread Ralph Katz
You wrote: > A quick check of my system log shows 1514 failed ssh attempts in the > last four days. That almost goes away with fail2ban. Works with sarge, too, (though I haven't yet upgraded from fail2ban 0.6.0-3.) Regards, Ralph -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: Debian SSH server configuration

2006-04-26 Thread Digby Tarvin
On Wed, Apr 26, 2006 at 02:23:30PM -0400, Greg Folkert wrote: > On Wed, 2006-04-26 at 01:58 +0100, Digby Tarvin wrote: > > On Tue, Apr 25, 2006 at 07:23:26PM -0400, Bruce Corbin wrote: > > > Hi All, > [...] > > > Any suggestions? > > > > [...] > > You still stop the black hats from trying to guess

Re: Debian SSH server configuration

2006-04-26 Thread Greg Folkert
On Wed, 2006-04-26 at 01:58 +0100, Digby Tarvin wrote: > On Tue, Apr 25, 2006 at 07:23:26PM -0400, Bruce Corbin wrote: > > Hi All, [...] > > Any suggestions? > > [...] > You still stop the black hats from trying to guess passwords > using your ssh server. Yes... yes you will. But what is the fun

Re: [Fwd: Re: Debian SSH server configuration]

2006-04-26 Thread Christopher Nelson
On Wed, Apr 26, 2006 at 08:15:44PM +0200, Martin A. Brooks wrote: > Andrew M.A. Cater wrote: > >When it asks you for a passphrase, hit twice - you have a null > >passphrase (which is fractionally less secure but that's probably OK.) > > Not so much "fractionally less secure" as "insecure". If the

Re: [Fwd: Re: Debian SSH server configuration]

2006-04-26 Thread Stephen R Laniel
On Wed, Apr 26, 2006 at 08:15:44PM +0200, Martin A. Brooks wrote: > Not so much "fractionally less secure" as "insecure". If the machine > containing the private key is compromised so, potentially, is every > machine that the public key has been distributed too. Though if you want to prevent one

Re: [Fwd: Re: Debian SSH server configuration]

2006-04-26 Thread Martin A. Brooks
Andrew M.A. Cater wrote: When it asks you for a passphrase, hit twice - you have a null passphrase (which is fractionally less secure but that's probably OK.) Not so much "fractionally less secure" as "insecure". If the machine containing the private key is compromised so, potentially, is eve

Re: [Fwd: Re: Debian SSH server configuration]

2006-04-26 Thread Andrew M.A. Cater
On Tue, Apr 25, 2006 at 09:26:05PM -0400, Bruce Corbin wrote: > Thanks. I'll read up on certificates and read the link at the bottom of > your reply. It's not sinking in at the moment but hopefully it will > after a little reading. > > With respect to the problem: I want to have files on my "

Re: Debian SSH server configuration

2006-04-25 Thread Matthew R. Dempsky
On Tue, Apr 25, 2006 at 07:23:03PM -0400, Bruce Corbin wrote: > Any suggestions? Have you commented out ``UsePAM yes'' at the bottom of Debian's default /etc/ssh/sshd_config? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

[Fwd: Re: Debian SSH server configuration]

2006-04-25 Thread Bruce Corbin
Thanks. I'll read up on certificates and read the link at the bottom of your reply. It's not sinking in at the moment but hopefully it will after a little reading. With respect to the problem: I want to have files on my "server" at home and have my laptop be the only "out of house" machine

Re: Debian SSH server configuration

2006-04-25 Thread Digby Tarvin
On Tue, Apr 25, 2006 at 07:23:26PM -0400, Bruce Corbin wrote: > Hi All, > > I would like to configure a Debian server to only allow clients to ssh > in if the public keys (probably RSA keys) already reside on the hard > drives of both machines. > > After spending some time in the snail book I a

Re: Debian SSH server configuration

2006-04-25 Thread James Westby
On (26/04/06 01:22), James Westby wrote: > ...The server has a certificate so that you know who they are, and you get > this bit and have set it up. > > The client has a key, this is slightly different, as their is no web of > trust or similar... Sorry, I don't know what came over me. I don't ev

Re: Debian SSH server configuration

2006-04-25 Thread James Westby
On (25/04/06 19:23), Bruce Corbin wrote: > Hi All, > > Before you flame me --- I asked this question over in debian-ssh and > after 24 hours I didn't have a single hit on it. So I thought I would > try it over here. > > I would like to configure a Debian server to only allow clients to ssh >

Debian SSH server configuration

2006-04-25 Thread Bruce Corbin
Hi All, Before you flame me --- I asked this question over in debian-ssh and after 24 hours I didn't have a single hit on it. So I thought I would try it over here. I would like to configure a Debian server to only allow clients to ssh in if the public keys (probably RSA keys) already resid