attack
David Cary Hart
Fedora at TQMcube.com
Mon May 9 15:04:10 UTC 2005
On Mon, 2005-05-09 at 16:37 +0200, roland brouwers wrote:
> Hello everybody,
>
> Someone is attacking for a certain time on port SSH2
> He is trying to login as root and uses all kind of usernames.
> See annexed textfile
>
> How can I block a user after x failed logins?
> Can I do something else?
I use the swatch daemon to move them to the firewall after one attempt.
I believe that there is a swatch rpm in extras.
--
Multi-RBL Check: http://www.TQMcube.com/rblcheck.htm
Kill Spam at the Source: http://www.TQMcube.com/spam_trap.htm
Today's Spam Trap Adds: http://www.TQMcube.com/BlockedToday
RBLDNSD HowTo: http://www.TQMcube.com/rbldnsd.htm
More information about the fedora-list
mailing list