From owner-freebsd-questions@FreeBSD.ORG  Sat Jun 20 15:22:29 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 7D6CF4B0
 for <freebsd-questions@hub.freebsd.org>; Sat, 20 Jun 2015 15:22:29 +0000 (UTC)
 (envelope-from emre@gundogan.us)
Received: from athena.awarent.com (awarent.com [66.175.214.37])
 by mx1.freebsd.org (Postfix) with ESMTP id 59D25A99
 for <freebsd-questions@freebsd.org>; Sat, 20 Jun 2015 15:22:28 +0000 (UTC)
 (envelope-from emre@gundogan.us)
Received: from localhost (localhost [127.0.0.1])
 by athena.awarent.com (Postfix) with ESMTP id 85EA98068
 for <freebsd-questions@freebsd.org>; Sat, 20 Jun 2015 11:22:27 -0400 (EDT)
Received: from athena.awarent.com ([127.0.0.1])
 by localhost (athena.awarent.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id XNOEn3dIQWRt for <freebsd-questions@freebsd.org>;
 Sat, 20 Jun 2015 11:22:26 -0400 (EDT)
Message-ID: <55858537.2070509@gundogan.us>
Date: Sat, 20 Jun 2015 11:22:31 -0400
From: Emre Gundogan <emre@gundogan.us>
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Subject: Re: denyhosts/pfctl to block repeated logins?
References: <99DC5CD3-1D40-4A6B-B553-DA2619E942EF@vin-dit.org>
In-Reply-To: <99DC5CD3-1D40-4A6B-B553-DA2619E942EF@vin-dit.org>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Jun 2015 15:22:29 -0000

You can also check out fail2ban
(http://www.fail2ban.org/wiki/index.php/Main_Page) , which is a python
daemon that monitors various logs for suspicious activity and allows you
to define actions (one of which is to add firewall rules). It's
available in FreeBSD ports.

Emre.

On 06/20/2015 07:34 AM, John Holland wrote:
> What is the best tool to use to block repeated login attempts from unauthorized hosts?  And for deny hosts, how you unblock someone who is legitimate?
>
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"