attack

[Sam Varshavchik]

roland brouwers writes:

> 
> Hello everybody,
> 
> Someone is attacking for a certain time on port SSH2
> He is trying to login as root and uses all kind of usernames.
> See annexed textfile 
> 
> How can I block a user after x failed logins?
> Can I do something else?

You can reconfigure ssh to listen on another port, and set up portsentry to 
automatically firewall anyone who's hammering on the default ssh port.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050509/6b001b37/attachment-0001.sig>