<br><br><div class="gmail_quote">On Mon, Mar 30, 2009 at 2:49 PM, Bill Campbell <span dir="ltr"><<a href="mailto:linux-sxs@celestial.com">linux-sxs@celestial.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
On Mon, Mar 30, 2009, vu pham wrote:<br>
> I remember someone mentioned/asked/answered this already but I just<br>
> could not remember it.<br>
><br>
> My system gets a lot of password-guess attackes. What is the tool that<br>
> disables those remote attack hosts ?<br>
><br>
<br>
fail2ban comes to mind.<br>
<br>
Bill<br>
--<br><br></blockquote><div><br></div><div>denyhosts blocks ip addresses after 3 (configurable) failed ssh logins. </div></div><br>It can block either just ssh or all services for the denied ip address, adding the offending ip address to /etc/hosts.deny.<div>
<br clear="all"><br>-- <br>Ken <br>
</div>