[nmglug] ssh attacks

[Akkana Peck]

John Osmon writes:
> Look into fail2ban -- it is on most linux distros I'm used to seeing.
> It may do something that helps your situation.
> 
> Changing to another port does help cosmetically.  (It also allows you to
> run something on a port that captive portals allow through -- say,
> 53...)

Both of those have helped on our server, though we still get plenty
of attacks. But if you run something like fail2ban, make sure you
have some sort of out-of-band option to get to the server in
emergencies: it's a real drag when due to some weird circumstance
you end up locked out of ssh to your own server.

        ...Akkana