attack

David Cary Hart Fedora at TQMcube.com
Mon May 9 15:04:10 UTC 2005


On Mon, 2005-05-09 at 16:37 +0200, roland brouwers wrote:
> Hello everybody,
> 
> Someone is attacking for a certain time on port SSH2
> He is trying to login as root and uses all kind of usernames.
> See annexed textfile 
> 
> How can I block a user after x failed logins?
> Can I do something else?

I use the swatch daemon to move them to the firewall after one attempt.
I believe that there is a swatch rpm in extras.
-- 
Multi-RBL Check:         http://www.TQMcube.com/rblcheck.htm
Kill Spam at the Source: http://www.TQMcube.com/spam_trap.htm
Today's Spam Trap Adds:  http://www.TQMcube.com/BlockedToday
RBLDNSD HowTo:           http://www.TQMcube.com/rbldnsd.htm




More information about the fedora-list mailing list