Preventing SSH Dictionary Attacks With DenyHosts

[Heroin]

i just closed port 22 on my router so only internal machines can SSH eachother

[LucnetSolutions]

One thing we do to add some more security for SSH is we don't use the shared IP as the listen IP for SSH and we don't use the standard port 22. SSH is disabled by default and can be turned on for 24 hours max at a time.

Then we also have it set where a email is sent with IP and ISP information of the person that just logged in.

Originally Posted by LucnetSolutions

One thing we do to add some more security for SSH is we don't use the shared IP as the listen IP for SSH and we don't use the standard port 22. SSH is disabled by default and can be turned on for 24 hours max at a time.

Then we also have it set where a email is sent with IP and ISP information of the person that just logged in.

Good idea IMHO.