how to close pam_unix
We have a got a large amount of unauthorized login, such as :
Mar 27 09:18:40 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.42.162
Mar 27 09:18:41: Received disconnect from 134.175.42.162 port 49682:11: Normal Shutdown, Thank you for playing [preauth]
Is it possible to shut down the "pam_auth" function, what is the meaning of [preauth].
Thanks
1 Reply
jcardillo
Linode Staff
@980sou_linode - From what I understand, I don't think you'd want to shutdown the pam_auth function, since it has to do with controlling login and authentication to your server. Instead, I'd recommend installing something like Fail2ban:
https://linode.com/docs/security/using-fail2ban-for-security/