Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Sep 2006 17:23:02 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        "Dan Mahoney, System Admin" <danm@prime.gushi.org> questions@freebsd.org
Subject:   Re: sshd brute force attempts?
Message-ID:  <4464fjd009.fsf@be-well.ilk.org>
In-Reply-To: <70e8236f0609191412p5779d94cqa16df5631f4de916@mail.gmail.com> (Joao Barros's message of "Tue, 19 Sep 2006 22:12:37 %2B0100")
References:  <20060919165400.A4380@prime.gushi.org> <70e8236f0609191412p5779d94cqa16df5631f4de916@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
"Joao Barros" <joao.barros@gmail.com> writes:

> On 9/19/06, Dan Mahoney, System Admin <danm@prime.gushi.org> wrote:
>> Hey all,
>>
>> I've looked around and found several linux-centric things designed to
>> block brute-force SSH attempts.  Anyone out there know of something a bit
>> more BSD savvy?
>>
>> My best attempt will be to get this:
>>
>> http://www.csc.liv.ac.uk/~greg/sshdfilter/index_15.html
>>
>> running and adapt it.
>>
>> I've found a few things based on openBSD's pf, but that doesn't seem to be
>> the default in BSD either.

It is one of the several firewalling packet filters that come in the
FreeBSD base system.

>> Any response appreciated.
>>
>
> I'm using BruteForceBlocker quite successfully.
> I take the opportunity to thank danger for it :-)
>
> http://www.freshports.org/security/bruteforceblocker/

Which works with pf, as far as I can see.  There also seems to be
security/bruteblock, which works with ipfw2.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4464fjd009.fsf>