From mboxrd@z Thu Jan 1 00:00:00 1970 From: franck Subject: Re: SSHBrute Force: False Postives Date: Tue, 06 Feb 2007 22:12:06 +0100 Message-ID: <45C8EF26.40506@yahoo.co.uk> References: <02a601c745a8$9f7e1110$2904b00a@au.schpac.local> <7e36c7130702010832s7523c8a5vfaedca18e15f026a@mail.gmail.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R. DuFresne wrote: > portknocking is merely security through obscurity, is it not? > > especially so with modules that reside with preset defaults... > > Thanks, > > Ron DuFresne According to me, changing SSH default port is obscurity, and is not more secure ; Port knocking is more about preventing people from gaining access to your machine by improving authentication process, that's it. - -- Franck Joncourt http://www.debian.org http://smhteam.info/wiki/ GPG server : pgpkeys.mit.edu Fingerprint : C10E D1D0 EF70 0A2A CACF 9A3C C490 534E 75C0 89FE -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFyO8mxJBTTnXAif4RAuxjAJ9IHjWPv4QfKOOiuXLkzSu8bntz3ACfe+ne BXp0qd1XR73lviZ7NMvBnYs= =WjOM -----END PGP SIGNATURE----- ___________________________________________________________ Now you can scan emails quickly with a reading pane. Get the new Yahoo! Mail. http://uk.docs.yahoo.com/nowyoucan.html