Posts made by inroute

@tiagom ummmm....

@tiagom please see this link
http://manpages.ubuntu.com/manpages/precise/man8/dropbearkey.8.html

do you think it will help and honestly if you can guide me on how to do it .
it will be nice from you

@tiagom so what do you think i must do to stop hackers and right now one hacker he made the gateway reboots like 100 time

is there a way that i can block him

@tiagom Linux version 3.0.76-4.i586 gcc version 4.4.1 ( GCC)

@tiagom no there no under /etc/default/dropbear

sorry Tiagom im new in Linux
the pbx is Panasonic gsm gateway

there is no config folder in the /etc/ directory but i found dropbear folder in the /etc/ directory and it contain tow files

dropbear _dss_host_key
dropbear _rsa_host_key

any idea

@stacksofplates there is no ssh file or folder under /etc/

@tiagom thanks i will check it now

@tiagom GNU/Linux

thanks all for trying to help

@scottalanmiller umm... well i think i have to do it manual

Hi everyone,

I think I'm under attack I need help please.

Hackers are trying to login to my pbx gateway. I don't know why I viewed the log file to see why my gateway is rebooting himself every few minutes using this command below

tail -f /var/log/messages
authpriv.info dropbear[32417]: Child connection from xx.xx.xx.xx:2xxxx
authpriv.info dropbear[32417]: exit before auth: Disconnect received
auth.warn login[20056]: invalid password for 'UNKNOWN' on 'pts/7'
auth.warn login[20118]: invalid password for 'UNKNOWN' on 'pts/1'
auth.warn login[20582]: invalid password for 'UNKNOWN' on 'pts/4'
auth.warn login[20656]: invalid password for 'UNKNOWN' on 'pts/5'

And I see UNKNOWN user is trying to access.

I did a research about that on Google and I found a solution for that say have close SSH PasswordAuthentication. But I followed the steps to do that an I didn't find the file sshd_config that should be edit In etc/SSH/

Can someone help me please.

a bat file will be better

i did a test but it wont work i cant find the test ip i want it to be in the scope

Hi,

i need a little help its about windows firewall rules and batch file script on windows server 2008

i have created a rule in windows firewall inbound connections to block unwanted ip addresses.

the normal way to block unwanted ip's i open the rule and go to the scope tab and add the ip I want to block.

Is there a way that I can update the rule I created using a batch file and text note? What I mean is updating the scope with new ip’s that will be in the note.

Thank you all for your help

@Kelly i think you did not got me

@Kelly from ADSL modem to the Dual router using network cable cat5

@Kelly ISP provider has nothing to do with that..... the problem is in the 255.255.255.0

@Kelly no ISP did not provided me with a submask its a TP-Link Adsl modem normal Adsl router