anti-bruteforce PAM module

Stanislav Sedov stas at 310.ru
Thu Oct 20 22:13:45 UTC 2005


There is the first version of my anti bruteforce PAM module available.
It's primarily intended for preventing bruteforce attacks on authentification-
protected services (SSH, telnet, etc).
   
This module mainatins per-host statistics list. When the number of failed
authentification attempts from one hosts exeeds pre-configured limit,
the module performs special actions.
   
The module was tested on FreeBSD 7.x/6.x/5.x/4.x, RedHat Linux ES 4,
SunOS 5.10/5.11. It's still in alpha quality, since it was not
widely testes. However, it's used already in production, on 20+
servers.
   
Feel free to send comments/bug reports/suggestions to me. It'll be very  
helpful for me.
   
Home page of the module: http://mbsd.msk.ru/pam_af.html.

                                                    Thanks in advance,
                                                      Stanislav Sedov.




More information about the Pam-list mailing list