Re: [Sshguard-users] protecting a server with password authentication disabled

[Kevin Z. <kev...@gm...>]

On 04/17/2016 13:24, Henri Shustak wrote:
> I have been looking at ways to use SSH Guard to protect a server
> which only accepts key based authentication. I did find a discussion
> about enabling protection for pre-auth :
> 
> https://sourceforge.net/p/sshguard/mailman/message/32351603/
SSHGuard recognizes attempts to log into a server that is configured to
disallow all but key logins (preauth failures) as attacks.

> Basically, I am curious to know if there is a simple option to enable
> protection for SSHD which only accept key-based authentication or if
> the recommended approach is to dive in and start modifying various
> files.

You need to modify sshd_config to disallow password logins. Check your
operating system vendor's documentation for how to do so. It varies
between operating systems, but it generally is either
"ChallengeResponseAuthentication No" or "PasswordAuthentication no".

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090