[nlug] Re: Hack the firewall day

• Previous message: John Chapin: "[nlug] Re: Hack the firewall day"
• In reply to: David R. Wilson: "[nlug] Hack the firewall day"

On 7/17/06, David R. Wilson <> wrote:
> Hello fellows,
>
> Has anyone else seen an increase in attempts to hack boxes recently?
> I watched one in progress on a firewall today that was automated.
> Something over 1000 attempts was made from the same address from APNIC.
>
> Beside being really anal and blocking specific addresses, is there a
> good way to fight this?

A "deny all" policy as the basis of your security.

You're going to have to be more specific than just "attempts to hack
boxes". I see all kinds of stupid crap going on hitting the firewall
on the cablemodem, most of which isn't worth paying a bit of attention
to.

If you're seeing brute force SSH attempts, there's a relatively easy
way to silence them for good.

-- 
Send all requests to:  
 Put your command in the SUBJECT of the message:
   "subscribe" or "unsubscribe"
Quick unsubscribe: <mailto:?Subject=3Dunsubscribe>
Mailing list archives may be found at: <http://www.nlug.org/mail/>
**********************************************************************
This list is from your pals at NetCentral <http://www.netcentral.com/>

• Previous message: John Chapin: "[nlug] Re: Hack the firewall day"
• In reply to: David R. Wilson: "[nlug] Hack the firewall day"

This archive was generated by hypermail 2.1.6 : 07/18/06 CDT