From owner-freebsd-questions@FreeBSD.ORG Wed Nov 14 00:36:06 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1ADF216A417 for ; Wed, 14 Nov 2007 00:36:06 +0000 (UTC) (envelope-from npu3pak@icnet.ru) Received: from icnet.ru (portal.inetcom.ru [194.187.205.238]) by mx1.freebsd.org (Postfix) with ESMTP id D421913C45A for ; Wed, 14 Nov 2007 00:36:05 +0000 (UTC) (envelope-from npu3pak@icnet.ru) Received: from [194.187.207.211] by icnet.ru with esmtpa (Exim 4.66 (FreeBSD)) (envelope-from ) id 1Is5r4-0003kB-KD; Wed, 14 Nov 2007 03:11:42 +0300 Message-ID: <473A3D39.4080108@icnet.ru> Date: Wed, 14 Nov 2007 03:11:37 +0300 From: "Grigoriy S. Gusew" User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Grant Peel References: <013a01c82537$457df210$6501a8c0@GRANT> In-Reply-To: <013a01c82537$457df210$6501a8c0@GRANT> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-SA-Exim-Scanned: No (on icnet.ru); Exit with error (see exim mainlog) Cc: freebsd-questions@freebsd.org Subject: Re: IPFW or ProFTPD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2007 00:36:06 -0000 Check for bruteblock or sshit in /usr/ports/security i got bruteblock installed and it works for 3 months already, blocking bruteforcers from all over the world :) Grant Peel wrote: > Hi all, > > I am getting lots of brute force attacks on my proftpd server and was > wondering if anyone knows of a way for IPFW to check incomming > connections and automagicaly block an IP for a period of time when too > many connections are made on a port, or if any Proftpd gurus out there > know if there is a mod that does the same thing. I have mod_Delay > installed, but it does not seem to help much. > > TIA, > > -Grant >