Jak zablokovat IP adresu po nekolika neuspesnych prihlasenich k ssh

[hasak]

On Wed, 29 Jul 2009 07:36:03 +0200, Kovář Jan <jan-kovar na meggle.cz> wrote:

> DD.
> Logwatch mi denne vyplivne podobnou statistiku:
> sshd:
>
> Authentication Failures:
> unknown (125.206.243.126): 18579 Time(s)
> unknown (193.204.77.87): 1719 Time(s)
> root (193.204.77.87): 264 Time(s)
> root (125.206.243.126): 236 Time(s)
> root (58.26.70.32): 106 Time(s)
> ftp (193.204.77.87): 22 Time(s)
> unknown (58.26.70.32): 20 Time(s)
> atd.
>
> poradite mi prosim, jestli existuje neco, co by v pravidelnych  
> intervalech prochazelo log a po napr. peti neuspesnych pokusech o  
> prihlaseni k ssh, by pridalo pravidlo do iptables? Nebo cokoliv, co by  
> zabranilo podobnym utokum.
>
> Dekuji
>
> Honza
> _______________________________________________
> Linux mailing list
> Linux na linux.cz
> http://www.linux.cz/mailman/listinfo/linux
>

http://www.fail2ban.org/wiki/index.php/Main_Page

-- 
hasak

/ spokojny uzivatel Linuxu /