Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: Christophe Garault <christophe@...>
Subject: Re: [OT?] automatically firewalling off IPs
Date: Mon, 03 Oct 2005 09:53:18 +0200
Jeremy Brake a écrit :

>Hey all,
>
>I'm looking for an app/script which can monitor for failed ssh logins, 
>and block using IPTables for $time after $number of failed logins (an 
>exclusion list would be handy as well) so that I can put a quick stop to 
>these niggly brute-force ssh "attacks" I seem to be getting more and 
>more often.
>
>Anyone have any ideas?
>  
>
Yep: emerge fail2ban (http://sourceforge.net/projects/fail2ban).
It's an excellent script written in python that can monitor all 
unsuccessfull logins (ssh, apache)
There's a fail2ban.conf file where you can define many options to 
protect you from a Dos.

>Thanks, Jeremy B
>  
>
Have a nice day.

-- 
Christophe Garault
-- 
gentoo-security@g.o mailing list


Replies:
Re: [OT?] automatically firewalling off IPs
-- Jerry Eastmanhouser
References:
[OT?] automatically firewalling off IPs
-- Jeremy Brake
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: [OT?] automatically firewalling off IPs
Next by thread:
Re: [OT?] automatically firewalling off IPs
Previous by date:
Re: [OT?] automatically firewalling off IPs
Next by date:
Re: [OT?] automatically firewalling off IPs


Updated Oct 31, 2011

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.