More SSH 'trolling'

Björn Persson listor1.rombobeorn at comhem.se
Fri Oct 15 15:19:04 UTC 2004


dave wrote:

>                    the configuration file below. This
>                    implementation will enter a "drop"
>                   line to your IPTables configuration
>                    when someone attempts to login to
>                    your host with the username "root"
>                   or any username that is not defined
>                              on the host. 

Can this be modified to trigger only after three failed attempts within
five minutes or so, so that nobody gets locked out because of a simple typo?

Björn Persson






More information about the fedora-list mailing list