As someone who had no experience dealing with Unix or Linux before about 6 months ago, I'm feeling pretty comfortable with managing a Linux server now. The one question I do have is about DenyHosts, and how it's sending out reports.
Firstly, I get about 3 to 4 DenyHosts reports a day. My first question is, is it really true that that many people are trying to brute-force my server? Every time someone is locked out, I get an email that a host has been denied access, which isn't that important to me, as I'm the only human user on the system.
Is there a better way to handle the flood of emails coming to me, or a better way to stop people from trying to gain access to my server? Currently I have all of my
root email forwarded to an actual email address, so I don't have to login via SSH to read it. (Root login is disabled, so I login as myself and
sudo su into root.
Any insight into this would be much appreciated.