Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #12260

Re: fedora 20 disabling ssh by default

From Rich <rich@example.invalid>
Newsgroups comp.os.linux.misc
Subject Re: fedora 20 disabling ssh by default
Date 2014-10-10 08:50 +0000
Organization My Linux Box
Message-ID <m186ko$8na$1@dont-email.me> (permalink)
References <m175d3$mtg$1@speranza.aioe.org> <slrnm3e6v1.g24.BitTwister@wb.home.test> <m17is4$f22$1@speranza.aioe.org>

Show all headers | View raw

Bill Cunningham <nospam@nspam.invalid> wrote:

> "Bit Twister" <BitTwister@mouse-potato.com> wrote in message 
> news:slrnm3e6v1.g24.BitTwister@wb.home.test...
> > On Thu, 9 Oct 2014 19:23:11 -0400, Bill Cunningham wrote:
> >>     Hi,
> >>
> >> I can't find in fedora like there seems to be in other distros a
> >> config file for ssh.
> >
> > It should not be hard to find, try
> > locate ssh | grep conf | grep etc
> >
> >> There is the sshd that constrols the service. People are trying to
> >> hack me. I did use this to turn it off.
> >>
> >> service sshd stop
> >>
> >> Which in turn caused systemctl to deactivate ssh(d).
> >
> > No it did not deactivate it, It did shut down the sshd
> > service/daemon. Next boot, sshd will be running again.
> >
> >> Not can I turn this off by default?
> >
> > Yes,  "systemctl disable sshd," disables sshd from being started
> > during boot.
> >
> > You can still do a systemctl start sshd when you need it to run
> > then systemctl stop sshd when done.

>     I logged on the other day and the shell told me that there was
> over 400 attempts by a certain IP address to connect. It must've been
> while I was using the machine and didn't notice it.

> Bill

That is most likely a brute force password attempt.  If you shutdown
ssh, you'll block the attempts, but also prevent yourself from logging
in via ssh.  So if you log in via ssh, you'll end up shutting yourself
out as well.

However, if your password is properly random, you have little to worry
about other than extra entries in your log files.

But if you want to block the attempts, you could install sshfaker
(http://www.pkts.ca/ssh-faker.shtml) or fail2ban
(http://www.fail2ban.org/wiki/index.php/Main_Page) and block the brute
force password attempt, while leaving ssh open for yourself to use.

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 19:23 -0400
  Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-09 23:35 +0000
    Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-09 20:25 -0400
      Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 01:11 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:32 +0000
        Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-10 17:59 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 23:13 -0400
      Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 08:50 +0000
        Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 09:10 +0000
          Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 10:16 +0100
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:05 -0400
              Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-11 07:47 +0100
          Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 09:26 +0000
            Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 11:00 +0100
            Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 10:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 10:29 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 16:27 -0400
          Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:41 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:03 -0400
              Re: fedora 20 disabling ssh by default John Hasler <jhasler@newsguy.com> - 2014-10-10 20:28 -0500
              Re: fedora 20 disabling ssh by default Robert Riches <spamtrap42@jacob21819.net> - 2014-10-11 02:52 +0000
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:03 +0000
                Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-11 14:38 -0400
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 18:05 -0400
                Re: fedora 20 disabling ssh by default Richard Kettlewell <rjk@greenend.org.uk> - 2014-10-11 23:18 +0100
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 23:43 +0000
                Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 22:34 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 19:13 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 00:30 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 21:27 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 02:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 03:59 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:34 +0000
  Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:31 +0000
  Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-10 16:06 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:00 -0400
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:02 +0000
      Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-11 16:35 -0400
  Re: fedora 20 disabling ssh by default HakTar <FiteWinTel@gmail.com> - 2014-10-30 07:34 +0000

csiph-web