Click to See Complete Forum and Search --> : Customizing login failure messages


phil_r
02-07-2005, 02:13 PM
Hey guys.
I just noticed in my logs there's been a lot of access attempts into my machine via the internet. None were successfull (I only have 3 accounts that are able to have an interactive login). What I'm looking to do is to customize an unknown user error message, so if someone remotely tries to get into my machine with an invalid account, a message such as:-

"I don't know you, please go away or else"

or words to that effect :-) appear on the perp's machine. Is this possible?

Phil.

bwkaz
02-07-2005, 07:35 PM
They won't bother looking at it, because your invalid login attempts are coming from automated ssh scanning. I doubt the client machine goes any farther than just checking whether your server accepts the password it's currently working on. If not, it closes the connection and moves to the next password in its list.

See this thread (and some of the isc.sans.org links I put in there) for a bit more explanation:

http://www.justlinux.com/forum/showthread.php?s=&threadid=137787

phil_r
02-07-2005, 08:33 PM
Thanks bud.