Question bruteforcing

[CodeHeads]

On Mon, 29 May 2006 22:37:44 -0500 Matt Domsch <Matt_Domsch at dell.com> wrote:

> On Mon, May 29, 2006 at 08:37:39PM -0400, CodeHeads wrote:
> > On Tue, 30 May 2006 00:31:52 +0200 nightrid3r <03taxi at gmail.com> wrote:
> > 
> > > Op ma, 29-05-2006 te 17:03 -0500, schreef Mike C:
> > > > What exactly is bruteforcing and is their away to stop it in fedora 
> > > > without useing a router or firewall box?
> > > > 
> > > > Thanks for any help
> > > > 
> > > bruteforcing is an atack (useualy against the root account or a known
> > > user name) where the attacker uses a password generator or dictionary to
> > > test all possible paswords.
> > > 
> > > the only defence i know of is setting up your system so that iptables
> > > deny's the attack source after a number of failed attempts.
> > > Can't give further info cos i have no idea how to do it. (don't realy
> > > understand iptables enough to do it)
> > 
> > 
> > I know that there are shell scripts out there out automate putting the IP in
> > the hosts.deny list.
> > Here is something I found using google. It was the 1st hit.
> > http://la-samhna.de/library/brutessh.html
> 
> 
> DenyHosts does this too, and it's in Extras. :-)
> 
> # yum install denyhosts
> 
> Thanks,
> Matt
> 

Thanks Matt, that what is was. Another brain fart.

Will
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20060529/2f4c00ff/attachment-0001.sig>