LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 01-17-2010, 03:38 PM   #1
jmoschetti45
Member
 
Registered: Oct 2004
Location: Michigan
Distribution: Debian Squeeze (2.6.32-5)
Posts: 136
Blog Entries: 1

Rep: Reputation: 17
SSH login banner/No root login


I have root login disabled in sshd_conf, but you can still put in the username root when you ssh in, just says denied even with the right password.

Is there a way to bring up a message that says denied or something instead of just allowing attempted logins? I'm not too worried about it, fail2ban will ban the IP after 2 failed attempts, but it'd be nice to have the option to not even allow attempts.

I know there's the banner.net option, but that comes up before the username.
 
Old 01-17-2010, 03:51 PM   #2
smeezekitty
Senior Member
 
Registered: Sep 2009
Location: Washington U.S.
Distribution: M$ Windows / Debian / Ubuntu / DSL / many others
Posts: 2,219

Rep: Reputation: 164Reputation: 164
Well if its going to deny evreytime even if the password is correct whats the point?
 
Old 01-17-2010, 03:57 PM   #3
jmoschetti45
Member
 
Registered: Oct 2004
Location: Michigan
Distribution: Debian Squeeze (2.6.32-5)
Posts: 136
Blog Entries: 1

Original Poster
Rep: Reputation: 17
Because people try anyways.

Any way to have iptables or something along those lines look and see what the username entered was to just ban it instantly? Not sure since I don't know if the username going through ssh is encrypted or not.
 
Old 01-17-2010, 04:51 PM   #4
rich_c
Member
 
Registered: Apr 2008
Location: UK
Distribution: Mepis; Maemo; openSUSE
Posts: 384
Blog Entries: 74

Rep: Reputation: 81
I'd guess this is something that fail2ban would need to do, but I'm unable to find anything to indicate what config changes you'd need to implement it.

I think it may be a case of let them have their attempts & then get jailed!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How do you turn off login banner for non-interactive ssh? cpatter12 Linux - Security 14 04-05-2013 07:31 AM
How to setup system Login banner and Login message 06-03-05 Linux - Newbie 9 11-03-2011 11:42 AM
SSH Login Banner Display raiden4201 Linux - Newbie 11 12-08-2008 04:41 PM
Ssh Login As Root rajaniyer123 Solaris / OpenSolaris 2 12-20-2006 01:10 AM
ascii graphics for ssh banner login pAn1k Linux - Security 2 08-04-2006 03:47 PM


All times are GMT -5. The time now is 01:18 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration