Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Jan 2007 08:20:43 -0600
From:      Len Conrad <LConrad@Go2France.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: sshd break-in attempt
Message-ID:  <200701021505921.SM00292@TX2.Go2France.com>
In-Reply-To: <459A5A45.4080309@wmptl.com>
References:  <459A5A45.4080309@wmptl.com>

next in thread | previous in thread | raw e-mail | index | archive | help

>
>In our 'periodic daily' report/email, (only the list goes on for 
>hundreds of attempts). Anyhow, long story short; is there not an 
>easy way to make sshd block or deny hosts temporarily if X number of 
>invalid login attempts are made within a minute's time?

to reduce the brute force attacks + voluminous logging, tell sshd to 
listen on port other than 22.

google for "tcp wrappers sshd" for examples of how to use tcp 
wrappers in reactive blocking

Len








Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200701021505921.SM00292>