Re: Options for dealing with sshd brute force attacks

John Klos <[email protected]> wrote:
    > We all know that public facing ssh servers will get tons of brute force
    > attacks. That's just a fact of life.

Yes.
Do you have Password Logins enabled?
(even if no accounts can actually login that way)
I find that not having it as a method turns away many script kiddies.

    > For many machines, running blocklistd helps tremendously. But what
    > happens when blocklistd won't help because npf can't be used?

I don't run NetBSD much anymore, but why can't npf be used?
On my mail server, I blackhole route any IP which hits my submission port
with an invalid password.