i am running centos. how can i best avoid a brute force attack on my ssh server?
I found this list:
DenyHosts is a Python based security tool for SSH servers. It is intended to prevent brute force attacks on SSH servers by monitoring invalid login attempts in the authentication log and blocking the originating IP addresses. Explains how to setup DenyHosts under RHEL / Fedora and CentOS Linux. Fail2ban is a similar program that prevents brute force attacks against SSH. security/sshguard-pf protect hosts from brute force attacks against ssh and other services using pf. security/sshguard-ipfw protect hosts from brute force attacks against ssh and other services using ipfw. security/sshguard-ipfilter protect hosts from brute force attacks against ssh and other services using ipfilter. security/sshblock block abusive SSH login attempts. security/sshit checks for SSH/FTP bruteforce and blocks given IPs. BlockHosts Automatic blocking of abusive IP hosts. Blacklist Get rid of those bruteforce attempts. Brute Force Detection A modular shell script for parsing application logs and checking for authentication failures. It does this using a rules system where application specific options are stored including regular expressions for each unique auth format. IPQ BDB filter May be considered as a fail2ban lite.
anyone got any experience with any of those?