block host with brute-force attach

[Ken Moffat]

On Mon, Mar 30, 2009 at 2:49 PM, Bill Campbell <linux-sxs at celestial.com>wrote:

> On Mon, Mar 30, 2009, vu pham wrote:
> > I remember someone mentioned/asked/answered this already but I just
> > could not remember it.
> >
> > My system gets a lot of password-guess attackes. What is the tool that
> > disables those remote attack hosts ?
> >
>
> fail2ban comes to mind.
>
> Bill
> --
>
>
denyhosts blocks ip addresses after 3 (configurable) failed ssh logins.

It can block either just ssh or all services for the denied ip address,
adding the offending ip address to /etc/hosts.deny.

-- 
Ken
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.celestial.com/pipermail/linux-users/attachments/20090330/1d007665/attachment-0002.html