annoying brute force attack attempt using ssh
Scott van Looy
scott at ethosuk.net
Thu May 15 11:22:38 UTC 2008
Today Bill Crawford did spake thusly:
> 2008/5/15 Łukasz Jagiełło <jagiello.lukasz at gmail.com>:
>
>>> So I ran
>>> iptables -A INPUT -s 193.239.125.119 -j DROP
>>> and was surprised to see them attacks continue
>>> Ran iptables -L just to make sure my rule was there and it was
>>> in the end had to use hosts.deny to block the IP
>>>
>>> Anyone got any ideas why?
>
> You appended the rule, AFTER the ones which allow ssh through?
That should work though IIRC...I'm stopping a specific IP from
connecting
--
Scott van Looy - email:me at ethosuk.org.uk | web:www.ethosuk.org.uk
site:www.freakcity.net - the in place for outcasts since 2003
PGP Fingerprint: 7180 5543 C6C4 747B 7E74 802C 7CF9 E526 44D9 D4A7
-------------------------------------------
|/// /// /// /// WIDE LOAD /// /// /// ///|
-------------------------------------------
The great merit of society is to make one appreciate solitude.
-- Charles Chincholles, "Reflections on the Art of Life"
More information about the fedora-list
mailing list