router security

[Robert Holtzman]

On Fri, 22 May 2009, NoOp wrote:

             .........snip........

> I don't disagree w/dual nics (I actually connect my wireless router
> (different subnet) to a wired router with a considerably stronger
> built-in firewall). However I wonder if the Elcomsoft approach is really
> anything new (other than the fact that they can now use gpu's to speed
> up the attacks). The 'auditing' software performs brute force password
> attacks; wouldn't fail2ban and denyhosts and iptables suffice to block
> such attacks to begin with?

Would denyhosts be useful if there is no sshd server? No flames about 
not using one. Until now I never considered using it.

Thanks

             ...........snip.........

-- 
Bob Holtzman
AF9D 8760 0CFA F95A 6C77  E125 BF90 580F 8D54 9279
"If you think you're getting free lunch,
  check the price of the beer"