Re: Strange crontab-problem

2005-10-11 Thread Joachim Smit
Thank you all for your help. I will install fail2ban Kind regards, Joachim __ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Tr

Re: Re: Strange crontab-problem

2005-10-10 Thread Ralph Katz
> Sometimes about 2500 times an hour. It's just > very annoying. > > So sshd is constantly busy rejecting illegal users. > When I don't need access to that server, I shut down > sshd. Perhaps take a look at the recent thread: Re: SSH attack And my reply about a new package, fail2ban: http://l

Re: Strange crontab-problem

2005-10-10 Thread Joachim Smit
> Why don't you just turn off password auth and use > keys instead? I did. It's not that I am so afraid that they will brake in, it's just that they are trying it so many times. Sometimes about 2500 times an hour. It's just very annoying. So sshd is constantly busy rejecting illegal users. When

Re: Strange crontab-problem

2005-10-10 Thread Jörg Schütter
Hello Joachim, On Mon, 10 Oct 2005 10:43:57 -0700 (PDT) Joachim Smit <[EMAIL PROTECTED]> wrote: > Because some naughty boys try to get in one of my > clients' Debian-server a couple of hundred times a day > I decided to shut down sshd when I don't need. With a > simple mechanisme I can start sshd

Re: Strange crontab-problem

2005-10-10 Thread Craig M. Houck
You are likly getting back a line from ps -ef that is infact the process of the grep looking for sshd. I had a similar problem like this once. Trap just the grep sshd part and see if the grep isn't included. make that line read ... AANTAL=`ps -ef | /bin/grep '/usr/sbin/sshd' | /bin/grep -v grep