Re: [gentoo-server] sshd (many connection attempts with invalid user)

[Tim Schumacher]

Hi,

Claudinei Matos schrieb:

> I have a lot of connection attempts in my ssh server. I've take a look
> at sshd_config man pages but I didn't found a way to deny the source
> ip of the attempts by 5 minutes (i.e.) if this ip can't login after 5
> attempts (i.e.). Is there a way to do this?

You may want to try port knocking. The ssh port is blocked fully and you
have to open it through sending a magic packet to a secret port and so
for your IP the ssh port is going to be opened.

More infos can be obtained on http://www.portknocking.org/.

greetings

Tim