Re: SSH 2.4.0/3.0.1 usernames guessable ?

[Marco van Berkum <m.v.berkum () obit nl>]

quentyn () fotango com wrote:

> you could set
>
>         PasswordGuesses                 3
>
> to 1 (annoying) in the /etc/sshd2/sshd_config

Hmm, tried this as well, it gives a connection closed with
a illegal user, and a permission denied with a valid user,
Still guessable (SSH 2.4.0)

grtz,
Marco van Berkum

--
GCC dpu s:--- a- C+++ US++++ P++ L+++ E---- W N o-- K w---
O- M-- V-- PS+++ PE-- Y+ PGP--- t--- 5 X R* tv++ b+++ DI-- D----
G++ e- h+ r y*
+---------------------+------------------+-------------------+
|  Marco van Berkum   |   MB17300-RIPE   | Security Engineer |
|  http://ws.obit.nl  | "Chernobyl used  | Network Admin     |
|  m.v.berkum () obit nl |     Windows"     |      UNIX         |
+---------------------+------------------+-------------------+