Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Jul 2001 00:54:21 +0800
From:      Eugene Grosbein <eugen@grosbein.pp.ru>
To:        "Jason L. Schwab" <jlschwab@jlschwab.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: login failure question
Message-ID:  <20010718005421.A1615@grosbein.pp.ru>
In-Reply-To: <20010717094033.F3123-100000@mirage.jlschwab.com>; from jlschwab@jlschwab.com on Tue, Jul 17, 2001 at 09:43:23AM -0600
References:  <20010717094033.F3123-100000@mirage.jlschwab.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 17, 2001 at 09:43:23AM -0600, Jason L. Schwab wrote:

> 	What I am wondering is, is there a way, for like after 10 invalid
> 	logins from the same host/ip (mask?) can I have login run a ipfw
> 	command and block them for like 24 hours or something? I can do
> 	the 24 thing, I just need to know how to have login run whatever
> 	script I want it to call.

You can use syslogd to implement this.
man syslog.conf explains how to run your application for an event.
This application should keep statictics and run ipfw command 
when needed.

Eugene Grosbein

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010718005421.A1615>