Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Apr 2007 09:16:26 +0200
From:      peter@bsdly.net (Peter N. M. Hansteen)
To:        freebsd-questions@freebsd.org
Subject:   Re: How do I prevent unauthorized ssh login attempts?
Message-ID:  <87bqhab839.fsf@thingy.datadok.no>
In-Reply-To: <23ed14b80704260325w3fc06647vb114cd411625e16b@mail.gmail.com> (Andreas Wider's message of "Thu, 26 Apr 2007 12:25:06 %2B0200")
References:  <23ed14b80704260325w3fc06647vb114cd411625e16b@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
" Andreas Wider?e Andersen " <wodfer@gmail.com> writes:

> How can I stop these attempts or block them - or even recognize them? I do
> not have IPF installed.

There are several packages which could help, the one I prefer is a
simple pf rule set which tracks the number of connection attempts per
time unit and puts the too-chatty ones in a doghouse list of addresses.

One way to do it is described at http://home.nuug.no/~peter/pf/en/bruteforce.html

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87bqhab839.fsf>