Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #12284

Re: fedora 20 disabling ssh by default

From Rich <rich@example.invalid>
Newsgroups comp.os.linux.misc
Subject Re: fedora 20 disabling ssh by default
Date 2014-10-11 03:59 +0000
Organization My Linux Box
Message-ID <m1a9uu$fmp$1@dont-email.me> (permalink)
References (2 earlier) <m17is4$f22$1@speranza.aioe.org> <m186ko$8na$1@dont-email.me> <slrnm3f8kc.k2m.BitTwister@wb.home.test> <m18un5$la4$4@dont-email.me> <m19s3t$148$1@speranza.aioe.org>

Show all headers | View raw

Bill Cunningham <nospam@nspam.invalid> wrote:

> "William Unruh" <unruh@invalid.ca> wrote in message 
> news:m18un5$la4$4@dont-email.me...
> > On 2014-10-10, Bit Twister <BitTwister@mouse-potato.com> wrote:
> >> On Fri, 10 Oct 2014 08:50:32 +0000 (UTC), Rich wrote:
> >>>
> >>> That is most likely a brute force password attempt.  If you shutdown
> >>> ssh, you'll block the attempts, but also prevent yourself from logging
> >>> in via ssh.  So if you log in via ssh, you'll end up shutting yourself
> >>> out as well.
> >>
> >> Just tell your firewall what ip addresses are allowed to connect to sshd.
> >> Tell sshd that root is not allowed to use a password login.
> >> Tell sshd to listen on a different port.
> >>
> >>
> >>> However, if your password is properly random, you have little to worry
> >>> about other than extra entries in your log files.
> >>
> >> Random passwords are easier to crack. Use a funky phrase like
> >> my dog eats concrete.
> >> Feel free to sprinkle in numbers and !@#$%^&*()_+= characters.
> >
> > He did say "properly random". I am sure by properly he did not mean 4
> > random characters. A long enough password with random characters is
> > certainly better than your example which really is not terribly random.

>     Something generated by uuid would I think be pretty good. Or better yet 
> if you could direct something from dev/urandom as text; but I don't know if 
> you could do that.

Sure you can, provided you are willing to accept outright deletion of
some byte values:

  $ dd if=/dev/urandom bs=1 count=50 2> /dev/null | tr -d '[:cntrl:][:space:]'
  nãnغÐâlæ]ÒÈ&ã0eìGyE¼,^ZOsÔÔ°Ìo%öz£

  $ dd if=/dev/urandom bs=1 count=50 2> /dev/null | tr -d '[:cntrl:][:space:]'
  ئg±Ð>ùÉ$üèHÞÅ(ðS÷dÌ®6°°/¬¿(0CÆW·

  $ dd if=/dev/urandom bs=1 count=50 2> /dev/null | tr -d '[:cntrl:][:space:]'
  e®ü1ð}4y_)¿qîñl&×Ùß÷d·Q¦e,¼0³¸äl½\à¡+¨¶¢

  $

Note - I added a linefeed manually to make things visually lay out better.

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 19:23 -0400
  Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-09 23:35 +0000
    Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-09 20:25 -0400
      Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 01:11 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:32 +0000
        Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-10 17:59 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 23:13 -0400
      Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 08:50 +0000
        Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 09:10 +0000
          Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 10:16 +0100
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:05 -0400
              Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-11 07:47 +0100
          Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 09:26 +0000
            Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 11:00 +0100
            Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 10:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 10:29 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 16:27 -0400
          Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:41 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:03 -0400
              Re: fedora 20 disabling ssh by default John Hasler <jhasler@newsguy.com> - 2014-10-10 20:28 -0500
              Re: fedora 20 disabling ssh by default Robert Riches <spamtrap42@jacob21819.net> - 2014-10-11 02:52 +0000
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:03 +0000
                Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-11 14:38 -0400
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 18:05 -0400
                Re: fedora 20 disabling ssh by default Richard Kettlewell <rjk@greenend.org.uk> - 2014-10-11 23:18 +0100
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 23:43 +0000
                Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 22:34 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 19:13 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 00:30 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 21:27 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 02:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 03:59 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:34 +0000
  Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:31 +0000
  Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-10 16:06 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:00 -0400
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:02 +0000
      Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-11 16:35 -0400
  Re: fedora 20 disabling ssh by default HakTar <FiteWinTel@gmail.com> - 2014-10-30 07:34 +0000

csiph-web