MLUG: RE: [MLUG] Debian SSH root access keys
RE: [MLUG] Debian SSH root access keys
Email address obfuscation in effect -- please click here to turn it off.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
On Thu, 15 May 2008, Nowlin, Dan wrote:

It is a perl script that runs as a service. It monitors your security log or whatever log sshd reports to for invalid login attempts. If it detects X number of invalid login attempts from the same IP then it puts that IP in a blacklist in iptables. It also keeps a log of how long that IP has been blocked and removes it after so many days. This way your blacklist does not get too long.

I'll have to try sshblacklist one of these days. Sounds like a great design.


Mike

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members