your favourite method of dealing with ssh brute force attacks

[Léon Keijser]

On Wed, 2010-03-17 at 22:55 +0100, Michał Piotrowski wrote:
> I recetly had 30 hours of ssh brute force attack on my system. I'm
> using strong passwords, but still can be geneated from /dev/random, so
> I switched to rsa authentication. What's your favourite way to deal
> with such attacks? Please describe pros and cons.

off-topic, but here's a few: run ssh on a high, non-standard port,
implement a portknocker, only work with certificates (not passwords),
set PermitRootLogin to no in your sshd config, obfuscate your
username(s), etc.


Léon