another ssh question

[Vivek J. Patankar]

tony.chamberlain at lemko.com wrote:
> I was looking and at playing around with /etc/ssh/sshd_conf.  What I 
> want to do is
> after say 5 or so failed attempts to ssh, I want it to block ssh at 
> least for a time
> (to keep people from hacking in).  I uncommented anything that looked 
> like it
> might do that, restarted sshd (even rebooted).  Then I tried to ssh 
> several times
> making up things for password: banana, orange, lemon, apple, etc. (the 
> real password
> is nothing like that).  I got through all the fruits and several 
> vegetables and it still
> wasn't denied.  When I finally entered the correct password it let me in 
> right away.
> 
> What is the correct way to block ssh attempts after several failed ones?

Rick Stevens gave the answer[1] to that a few days ago in a thread I had 
started. It's an IPTables based solution.

[1] http://www.redhat.com/archives/fedora-list/2007-August/msg01222.html

-- 
Regards,
विवेक ज. पाटणकर (Vivek J. Patankar)

Registered Linux User #374218
Fedora release 7 (Moonshine)
Linux 2.6.22.1-33.fc7 x86_64