Date: Tue, 11 Jan 2005 00:17:19 -0800 From: "Ted Mittelstaedt" <tedm@toybox.placo.com> To: "Erik Norgaard" <norgaard@locolomo.org>, "Gene" <listmail@Bomgardner.net> Cc: "freebsd-questions@FreeBSD. ORG" <freebsd-questions@freebsd.org> Subject: RE: High levels of breakin attempts Message-ID: <LOBBIFDAGNMAMLGJJCKNMEAEFAAA.tedm@toybox.placo.com> In-Reply-To: <41E38A6C.1070601@locolomo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Yes Eric, just write a FAQ answer and post it per the following: http://www.freebsd.org/docproj/submitting.html Thanks for volunteering! Ted > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Erik Norgaard > Sent: Tuesday, January 11, 2005 12:12 AM > To: Gene > Cc: freebsd-questions@FreeBSD. ORG > Subject: Re: High levels of breakin attempts > > > Gene wrote: > > Over the past few months there have been a remarkably high level of > > brute force attacks logged by sshd. I was wondering, is > there a way that > > sshd (or some other package) can monitor login attempts and > if more than > > say 5 or 6 attempts are made to login from a particular ip address, > > temporarily block that address (perhaps at the firewall)? > It'd be real > > satisfying to just dump the attackers' packets to the bit bucket and > > slow 'em down a bit. > > Sorry, but this topic was discussed just before you posted - see > "Blacklisting IPs" and it is regularly discussed on various lists. > Everyone asks that same question, and everyone propose the same > solutions, could this be added to the faq? > > Cheers, Erik > -- > Ph: +34.666334818 web: > www.locolomo.org > S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt > Subject ID: > A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9 > Fingerprint: > 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?LOBBIFDAGNMAMLGJJCKNMEAEFAAA.tedm>