[arm-allstar] Trouble with Supermon

Andy KB7B andy_kb7b at yahoo.com
Wed May 16 10:31:33 EST 2018


Tony,
You can also add another account and easily disable root logins 
for ssh making all attempts at the root account fail.

-Andy, KB7B

      From: Tony Ross via arm-allstar <arm-allstar at hamvoip.org>
 To: arm-allstar at hamvoip.org 
Cc: Tony Ross <ynotssor at yahoo.com>
 Sent: Wednesday, May 16, 2018 5:08 PM
 Subject: Re: [arm-allstar] Trouble with Supermon
   
While some people would criticize such alternate ports for wks 
(well-known services) as "security by obscurity", it does work.

I had a repeater owner ask for my help, as one of his irlp nodes seemed 
to not respond to ssh client requests; he couldn't log in remotely. It 
was difficult, but I eventually found a prompt. I immediately looked at 
/var/log/* and found some very large syslog files. Looking at their 
contents showed an ssh attack on port 22, so I changed the port to 
something in a different range, re-started the sshd and the problem stopped.

Using simple system tools such as grep, sort, awk, uniq and wc, it was 
easy to find that > 3.7 million ssh attempts in 4 days from 4 east-Asian 
IP addresses had essentially crippled the system.

It did speak well for his choice of passwords though.

On 05/15/2018 07:19 PM, "Charles Powell via arm-allstar" wrote:
> I use a port in the 9000s because it is an unexpected service there.  Your mileage may vary.
>
> 73,
>
> Charles - NK8O
>
>> On May 15, 2018, at 12:59 PM, Doug Crompton via arm-allstar <arm-allstar at hamvoip.org> wrote:
>>
>> Typically port 8080 is used but you can use high number if that does not
>> work. Here are three examples - 15700, 16300, 17400  but you are not
>> limited to them.
>>
>>
>> *73 Doug*
>>
>> *WA3DSP*
>>
>> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
>>
>>
>>
>> On Tue, May 15, 2018 at 12:31 PM, "Jim Darrough via arm-allstar" <
>> arm-allstar at hamvoip.org> wrote:
>>
>>> Hello.
>>>
>>>    SO what is a good alternative port to use instead of 80 that won't
>>> interfere with operations?
>>>
>>> 73 Jim KI7AY
>>>
>>>
>>> On 05/14/2018 02:04 PM, "Rory Bowers via arm-allstar" wrote:
>>>
>>>> Thank you so much Paul.  Yes I did and the display was exactly the same
>>>> with one exception, the login button now says logout.  I am running Chrome
>>>> for my browser (I hate explorer).  I went into settings in Chrome and made
>>>> sure that popups and scripts were enabled.  I really wanted to get this
>>>> working before we go onsite with two nodes this week.  I may have to live
>>>> without it :-(
>>>>
>>>> Rory, K5CKS
>>>>
>>>> On Mon, May 14, 2018 at 12:58 PM, Paul - KN2R <paulkn2r at gmail.com> wrote:
>>>>
>>>> Hi Rory,
>>>>> Sorry for delay, been busy.  I logged into your node and found nothing.
>>>>> Did
>>>>> you successfully login to Supermon?  You must be able to login to see the
>>>>> buttons.  Check that your 'popups' are not being blocked from your nodes
>>>>> web
>>>>> server!
>>>>>
>>>>> Paul / KN2R
>>>>>
>>>>>
>>>>> -----Original Message-----
>>>>> From: arm-allstar [mailto:arm-allstar-bounces at hamvoip.org] On Behalf Of
>>>>> "Rory Bowers via arm-allstar"
>>>>> Sent: Monday, May 14, 2018 1:20 PM
>>>>> To: ARM Allstar
>>>>> Cc: Rory Bowers
>>>>> Subject: [arm-allstar] Trouble with Supermon
>>>>>
>>>>> I am wondering if there is someone in the group that would be willing to
>>>>> have a look at a problem I am having with Supermon.  I can email a screen
>>>>> capture and a copy of my config files.  When Supermon comes up in my
>>>>> browser
>>>>> there are no control buttons for the node.  Login doesn't change anything
>>>>> except now there is a logout button.  Any help will be deeply
>>>>> appreciated.
>>>>> Rory, K5CKS
>>>>> _______________________________________________
>>>>>
>>>>> arm-allstar mailing list
>>>>> arm-allstar at hamvoip.org
>>>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>>>
>>>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>>>>
>>>>>
>>>>> _______________________________________________
>>>> arm-allstar mailing list
>>>> arm-allstar at hamvoip.org
>>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>>
>>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>>>
>>>>
>>> --
>>> 73 Jim
>>> La ciruela de Panamá
>>>
>>> _______________________________________________
>>>
>>> arm-allstar mailing list
>>> arm-allstar at hamvoip.org
>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>
>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>> _______________________________________________
>>
>> arm-allstar mailing list
>> arm-allstar at hamvoip.org
>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>
>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org

_______________________________________________

arm-allstar mailing list
arm-allstar at hamvoip.org
http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar

Visit the BBB and RPi2/3 web page - http://hamvoip.org

   


More information about the arm-allstar mailing list