[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] SSH EXPLOIT IN THE WILD



Hi!

Or you could install the following script in /usr/local/etc/secnotes, make it
executable, (chmod 750 /usr/local/etc/secnotes) then change your hosts.allow
and/or hosts.deny lines to:

sshd: ALL : spawn /usr/local/etc/secnotes "%a+%A+%c+%d+%h+%H+%s+%u" &

Great script, works fine!

But just one small question: If I put this in my hosts.allow - it means that everyone can connect to my ssh. If I don't put this in everyone is allowed, too - eh?!

Other way: I'm not unsecuring my server after adding this?!

Regards, Frank