Re: Inbound SSH allowed to be used with Code for i and other tools ? -- MIDRANGE-L

Subject: Re: Inbound SSH allowed to be used with Code for i and other tools ?
From: Richard Schoen <richard@xxxxxxxxxxxxxxxxx>
Date: Wed, 30 Oct 2024 22:30:54 +0000
List-archive: <https://archive.midrange.com/midrange-l/>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

Nice. I always forget about syslog.

I added those links to the site above.

Thanks

Regards,
Richard Schoen
Web: http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx

------------------------------

message: 3
date: Wed, 30 Oct 2024 21:22:10 +0100
from: Marc Rauzier <marc.rauzier@xxxxxxxxx>
subject: Re: Inbound SSH allowed to be used with Code for i and other
tools ?

Le 30/10/2024 ? 19:51, Richard Schoen a ?crit?:

Also if allowing SSH, what's a good way to monitor SSH connections and
connection attempts ? (I know I've seen SSH be used for DOS attacks
before on public IBMi systems.)

One can configure ssh daemon to populate logs files and syslog daemon to send some of the entries to a SIEM.

Checkout
https://www.ibm.com/support/pages/sshd-can-use-unix-syslog-facilities-logging
and https://www.ibm.com/support/pages/syslog-syslogd-pase-ibm-i

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.