[NTLUG:Discuss] Recommendation for "Log File Analysis" and firewall updater Software/system/program

Ralph Green, Jr. sfreader at sbcglobal.net
Fri Dec 17 13:29:30 CST 2004


Dave,
 I am a little behind on my NTLUG messages because the list has been so
busy lately.  If you are still looking for feedback on this, read on. If
not, just go to your next message.
  On systems that are publicly accessible, I would second one of Chris's
suggestions.  Disable authentication by password.  I  only use
public/private key authentication on publicly available servers.  That
is quite safe.  It does mean you can't connect from an arbitrary
machine.  You can only connect from a machine that has the private key
loaded.
  This does not answer the question you actually asked.  Why do you want
to analyze the logs?  I don't understand what you are trying to
accomplish there, so I can't comment.
Have a good day,
Ralph  

On Sat, 2004-12-11 at 00:55, David Simmons, PE wrote:
> Subject line say's it all...I keep noticing multiple ssh login failures
> (which are not me) and while I feel good about my passwords - I know
> it's just a matter of time!? Want something that auto-magically analyzes
> the logs to secure the system.
> 
> Thanks in advance - dave





More information about the Discuss mailing list