|
|
|
|
||||||
| comp.security.ssh SSH secure remote login and tunneling tools. |
![]() |
|
|
LinkBack | Outils de la discussion |
|
|
#1 |
|
Messages: n/a
Hébergeur: |
Hi
Is there the possibility to trigger an event from sshd to set dynamic firewall rules? For example to block a certain ip-adress after repeated login fails. There are constantly dictionary attacks against my SSH-Server. (SuSE Linux 10) TIA Andreas |
|
|
|
#2 |
|
Messages: n/a
Hébergeur: |
"Andreas Wolf" <bounce@example.com> writes:
> Is there the possibility to trigger an event from sshd to set dynamic > firewall rules? > For example to block a certain ip-adress after repeated login fails. > There are constantly dictionary attacks against my SSH-Server. (SuSE > Linux 10) Numerous tools do this, usually by looking at the logs for failed logins. One is sshblack: http://www.pettingers.org/code/sshblack.html Another thing you can do is move SSH to a nonstandard port. This provides no security advantage but will reduce the noise in your logs from the script kiddies. -- Alan Hadsell |
|
![]() |
| Outils de la discussion | |
|
|