How do I know if my system is secured?

[roachkv]

I recently have had multiple brute force attempts on my system on port 22. I see the failed logins via the reports emailed to me every day.

But how do I know if someone has successfully logged in? Even though my system has not been altered, I'm concerned someone could have gained access.

Are there logs of successful logins? I'm still not sure where to find all the system logs (see http://forums.freenas.org/showthread.php?5501-log-files).

 

[phoenix]

I recently have had multiple brute force attempts on my system on port 22..

You're not really saying that you have your file server on a public IP address with port 22 visible to the world, are you? IMO, that's not a good idea. Can't you put it behind a firewall and use a VPN to get to it?

 

[ProtoSD]

This topic has already been discussed in detail before in this thread: http://forums.freenas.org/showthread.php?1288-hacking-attempts&highlight=hacking+attempts

 

[roachkv]

Thanks. I just totally missed that one.

Any way I can delete (unnecessary) posts I originated to de-clutter things?

PS: yes, my system is behind a firewall, and now the ssh port has been changed with no more failed login attemps.