From: <li...@la...> - 2017-05-26 00:04:15
|
sshguard 1.7 is not catching key exchange ssh hacks. The number of fools attempting such a hack is small, but some are persistent. I've been blocking them by hand. # uname -a FreeBSD theranch 10.3-RELEASE-p18 FreeBSD 10.3-RELEASE-p18 #0: Tue Apr 11 10:31:00 UTC 2017 ro...@am...:/usr/obj/usr/src/sys/GENERIC amd64 # # pkg version -v | grep ssh sshguard-ipfw-1.7.1 = up-to-date with index auth.log.0.bz2:May 24 20:37:06 theranch sshd[60250]: fatal: Unable to negotiate with 172.81.185.192 port 50267: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] |