From owner-freebsd-questions@FreeBSD.ORG  Sat Oct 22 14:37:57 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 83EDF1065670
	for <freebsd-questions@freebsd.org>;
	Sat, 22 Oct 2011 14:37:57 +0000 (UTC)
	(envelope-from bruce@cran.org.uk)
Received: from muon.cran.org.uk (muon.cran.org.uk
	[IPv6:2a01:348:0:15:5d59:5c40:0:1])
	by mx1.freebsd.org (Postfix) with ESMTP id 3A22E8FC19
	for <freebsd-questions@freebsd.org>;
	Sat, 22 Oct 2011 14:37:57 +0000 (UTC)
Received: from muon.cran.org.uk (localhost [127.0.0.1])
	by muon.cran.org.uk (Postfix) with ESMTP id 4D8CBE79F2;
	Sat, 22 Oct 2011 15:37:56 +0100 (BST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cran.org.uk; h=subject
	:mime-version:content-type:from:in-reply-to:date:cc
	:content-transfer-encoding:message-id:references:to; s=mail; bh=
	HO3S/rGiWmBPTHtXr5C7mDAboy0=; b=PLGOKvGcSkNM8o58tIW1yacJ3fFe0dO3
	tg0Lm6E4aAMfoxabZ1IkdmPA55D8UVHhSDCp1U3N4Fd+nPlD3F3q/JoLdskzqtCt
	fNZDG+uIlLYMCFdrsYvC+Rnnjocj26XIZL3aifusr6TBU6KZPDsb3hiRKtOWmDdx
	EEEVJKEN75M=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=cran.org.uk; h=subject
	:mime-version:content-type:from:in-reply-to:date:cc
	:content-transfer-encoding:message-id:references:to; q=dns; s=
	mail; b=aB4s6ctWVTiVAtpGousEfSOmxG8Ej7PjEEPiSwIPiQIcTFwHTmurxX/M
	EzCHxt03TjuIB9uqfFwMIkzEH7bxsxDLsXge9Yc9EdH63N3oGbuoTeEa94hTsVZc
	OzBoNyUuznfp7xRykQ8yZr3fgmiXUQ1nFiYvUjxMWqp15zz0Rto=
Received: from [192.168.1.64] (188-220-36-32.zone11.bethere.co.uk
	[188.220.36.32]) (using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by muon.cran.org.uk (Postfix) with ESMTPSA id 2CC36E7546;
	Sat, 22 Oct 2011 15:37:56 +0100 (BST)
Mime-Version: 1.0 (Apple Message framework v1251.1)
Content-Type: text/plain; charset=us-ascii
From: Bruce Cran <bruce@cran.org.uk>
In-Reply-To: <20111022161242.11803f76.freebsd@edvax.de>
Date: Sat, 22 Oct 2011 15:37:55 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <85D6B8A7-9AF6-4188-BC58-F8CBF5ED9E91@cran.org.uk>
References: <000001cc90c0$a0c16050$e24420f0$@org>
	<4EA2CE72.5030202@cran.org.uk>
	<20111022161242.11803f76.freebsd@edvax.de>
To: Polytropon <freebsd@edvax.de>
X-Mailer: Apple Mail (2.1251.1)
Cc: freebsd-questions@freebsd.org
Subject: Re: Breakin attempt
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Oct 2011 14:37:57 -0000


On 22 Oct 2011, at 15:12, Polytropon wrote:

> On Sat, 22 Oct 2011 15:08:50 +0100, Bruce Cran wrote:
>> I suspect that these sorts of attacks are fairly normal if you're=20
>> running ssh on the standard port. I used to have lots of 'break-in=20
>> attempts' before I moved the ssh server to a different port.
>=20
> Is there _any_ reason why moving from port 22 to something
> different is _not_ a solution?

If you run some sort of shell server, or where many people need to login =
using ssh, you'll have a bit of a support problem telling people to =
select the non-default port. Also, some might consider it security =
through obscurity, which is often said to be a bad thing.

--=20
Bruce Cran