BUYVM把vps停了，让我加强安全管理

ethan

This ticket is notification that your service (209.141.**.**) is now suspended for being used in an outbound DDoS attack. Investigation into this incident shows that your VPS (along with 4 others) were compromised, and used to attack a remote ChinaNet/APNIC server. As the nature of this compromise appears to have been a bruteforce technique, we are requiring that you perform a full reinstall of your VPS, and implementing the following SSH security measures:

- Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

As this violation was the result of a compromise, no administrative action will be taken against you. However, please be aware that the reinstall and above security measure are absolutely mandatory; any further compromise from your VPS will be considered a second offense, and treated in accordance with our Terms of Service and Acceptable Usage Policy. Once you acknowledge and reply to this ticket, your service will be reactivated for you to perform the reinstall.


---
Aldryic C'boäs, Frantech Staff
[Email/MSN] [email protected]
[IRC] irc.frantech.ca / #frantech

=============================================
求助 这4个安全措置怎么做？
- Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

k2775739

ethan 发表于 2012-9-23 15:00
给我发信 就让我做下边这四个事。
但我不会做 啊
Assign a nonstandard port for SSH

让你用密匙登陆

lazyzhu

看签名

solar

早把默认密码改成200位的就成了，谁也破解不了你，也就没这屁事了

花雪月静

找找教程被

flydon

楼主去小夜博客那边观察一下就会发现了。他那里有修改端口和禁用root登陆的教程

hepac

100人民币包做好

comxp

看字面意思，是不是被侵入用来DDoS攻击ChinaNet/APNIC server

zhaorong65

改SSH默认端口
禁用root登录
禁用密码认证
启用RSA​​身份验证登录
额。。。google乱来的。。。叫你做好安全措施，为啥啊？

cooleyes

Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

修改ssh端口
禁用root登录
禁用密码登录
开启密钥认证登录