Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Jan 2005 22:40:48 -0700
From:      Tom Vilot <tom@vilot.com>
To:        murraytaylor@bytecraftsystems.com
Cc:        "'freebsd-questions@FreeBSD. ORG'" <freebsd-questions@freebsd.org>
Subject:   Re: High levels of breakin attempts
Message-ID:  <41E366E0.5070504@vilot.com>
In-Reply-To: <002101c4f79e$f3233200$c82aa8c0@LTTAYLORMNEW>
References:  <002101c4f79e$f3233200$c82aa8c0@LTTAYLORMNEW>

next in thread | previous in thread | raw e-mail | index | archive | help
Murray Taylor wrote:

>I havent checked forsure but could sysutils/ipa help.
>
>it can 'open/close' firewalls upon certain limit conditions...
>  
>

The closest thing I have seen is portsentry.

However, portsentry is a different beast. I don't think it "knows" about 
attempts to log in via ssh.

In other words ... I don't think portsentry can say "Hey!! Wait a sec. 
There are no users such as those. In fact, this server doesn't allow 
logins from ANYONE except X Y and Z via ssh keys .... Okay, time to 
block this bonehead ....."





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41E366E0.5070504>