Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] ssh certificate logins


I guess the best approach would be to consider using Port Knock
http://www.portknocking.org/

Cheers,
Brian


On 10/9/08, Phill O'Flynn <phill@xxxxxxxxxxxxxxx> wrote:
>
>
>
> Hi everyone
> I am running a fedora server and currently using hosts.allow to
> only allow ssh accesses from specific ip addresses. I did this because I
> was getting
> a lot of idiots from eastern Europe and Russia tring to crack my server.
>
> This has been ok  but now is prooving to be too restrictive. Can I get the
> server to force certificate based logins only?? If so how do I do it?? Is
> this the
> best approach anyway??
>
>
> Regards
> Phill O'Flynn
>
>
> --
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
>