Security-SSH Tunnelling In Hotspots For Privacy

ITT Knowledgebase has a good article on how to use SSH from a wifi hotspot for security. KevinDevin has ran a very good site for a long time and his ITT Knowledgebase is an excellent resource for any one involved in IT. A good place to stop by and go through when you have some free time.

DenyHosts, an SSH Server Attack Denial Tool

Linux Voodoo has a nice tutorial on a new application called DenyHosts. The nice part of this application is it gives admins more control on what they want done if a failed SSH log in happens. One of the weak points of SSH is it doesn't limit the number of failed log ons taht can occur. This opens the SSH utility to a brute force attack. DenyHosts helps fix this problem.

The stable version of DenyHosts currently available is 0.60. some of the system requiremetns are to have python ver 2.1 or greater installed on the system, and ensure sshd is compiled with tcp_wrappers support.

Once DenyHosts has been installed there are a number of options available when a failed SSH log on occurs. Some of the options are what to do when a failed log on occurs, how many failed log ons must occur before any actions are taken, information that will be collected in case of a failed log on, and where to send the log to when a failed log on occurs.

This looks like a good utility to use on any system that you have to remotely log into.