N66U ssh brute force attack enable ??

[jim769]

Just wondering is there any good reason to enable ssh brute force attack in my router. The default is disabled is there any disadvantage to having it enabled ?

 

[RMerlin]

Just wondering is there any good reason to enable ssh brute force attack in my router. The default is disabled is there any disadvantage to having it enabled ?

Enabling this means that worms (or actual hackers) trying to guess the password to your SSH login will get locked out after a few failed attempts, making it next to impossible to brute force their way in.

This is only necessary if enabling SSH access from the WAN however... unless you don't trust your LAN users.

I would say that in fact, people enabling it on WAN should always enable the brute force detection as well, unless they only rely on key-based authentication.

 

[jim769]

Excellent answer just what I was looking for. Thanks Merlin.

 

[elpibe10]

Enabling this means that worms (or actual hackers) trying to guess the password to your SSH login will get locked out after a few failed attempts, making it next to impossible to brute force their way in.

This is only necessary if enabling SSH access from the WAN however... unless you don't trust your LAN users.

I would say that in fact, people enabling it on WAN should always enable the brute force detection as well, unless they only rely on key-based authentication.

Any possibility of adding brute force detection to the VPN (PPTP) Server ?

It's the next best thing to IP blocking

 

[RMerlin]

Any possibility of adding brute force detection to the VPN (PPTP) Server ?

It's the next best thing to IP blocking

To be honest, PPTP should be disabled, as the protocol is insecure by design.