From owner-freebsd-questions@FreeBSD.ORG  Fri Jan 26 22:52:18 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 1CF1B16A401
	for <questions@freebsd.org>; Fri, 26 Jan 2007 22:52:18 +0000 (UTC)
	(envelope-from david@skytrackercanada.com)
Received: from 3s1.com (3s1.com [209.161.205.12])
	by mx1.freebsd.org (Postfix) with ESMTP id 6760F13C46B
	for <questions@freebsd.org>; Fri, 26 Jan 2007 22:52:15 +0000 (UTC)
	(envelope-from david@skytrackercanada.com)
Received: from mail.3s1.com (3s1.com [209.161.205.12])
	by 3s1.com (8.13.6/8.13.6) with ESMTP id l0QMTRCk098172;
	Fri, 26 Jan 2007 17:29:27 -0500 (EST)
	(envelope-from david@skytrackercanada.com)
From: "David Banning" <david@skytrackercanada.com>
To: Bill Moran <wmoran@collaborativefusion.com>, questions@freebsd.org
Date: Fri, 26 Jan 2007 17:29:27 -0500
Message-Id: <20070126222805.M6818@skytrackercanada.com>
In-Reply-To: <20070126150237.e2192773.wmoran@collaborativefusion.com>
References: <20070126182013.GA10551@skytracker.ca>
	<20070126150237.e2192773.wmoran@collaborativefusion.com>
X-Mailer: OpenWebMail 2.52 20060502
X-OriginatingIP: 70.52.121.240 (david)
MIME-Version: 1.0
Content-Type: text/plain;
	charset=iso-8859-1
X-Virus-Scanned: ClamAV version 0.88.7, clamav-milter version 0.88.7 on 3s1.com
X-Virus-Status: Clean
Cc: 
Subject: Re: thwarting repeated login attempts
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Jan 2007 22:52:18 -0000

> > I have installed denyhosts from the ports to stop ssh attacks, but
> > I have discovered a vulnerability, that is new to me. Denyhosts
> > does not seem to notice FTP login attempts, so the cracker can
> > attempt to login via FTP, 1000's of times until he finds a
> > login/password combination.
> 
> We refuse to run ftp because it's nearly impossible to secure.

so that's what I have decided - and went with sftp exclusively.
thanks -