[PLUG] Denyhosts, Cracking Attempts, and Intensity

Kurt Sussman plug at merlot.com
Fri Jun 5 17:39:57 UTC 2009


Quentin Hartman (qhartman at gmail.com) typed this ...
> On Fri, Jun 5, 2009 at 9:07 AM, Kurt Sussman <plug at merlot.com> wrote:
> >
> > This is why I use BlockHosts from aczoom.com...
> >
> 
> Blockhosts is useful, for sure, but I find it gets "false positives" in some
> cases, which is obnoxious. If you really wanted defense in depth, you could
> move to a non-standard port and run blockhosts. Personally though, I'd
> prefer to avoid the attack rather than rely on a countermeasure. But that's
> mostly a philospohical thing.

I agree, both defenses would be better than just one.

However, I've never see a false positive with BlockHosts. I've only been
running it for a couple years, though. #:)

--Kurt
-- 
----------------------------------------------------------------------
     Merlot Research Group, Inc               kls[at]merlot.com
    "Quality is free, but only to those who are willing to pay 
     heavily for it." (Lister, DeMarco: "Peopleware")



More information about the PLUG mailing list