From owner-freebsd-questions@FreeBSD.ORG Sat Nov 13 07:32:27 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C52D316A4CE for ; Sat, 13 Nov 2004 07:32:27 +0000 (GMT) Received: from mail.freebsd-corp-net-guide.com (mail.freebsd-corp-net-guide.com [65.75.192.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5AB1943D5C for ; Sat, 13 Nov 2004 07:32:27 +0000 (GMT) (envelope-from tedm@toybox.placo.com) Received: from tedwin2k (nat-rtr.freebsd-corp-net-guide.com [65.75.197.130]) iAD7WLv56636; Fri, 12 Nov 2004 23:32:22 -0800 (PST) (envelope-from tedm@toybox.placo.com) From: "Ted Mittelstaedt" To: "dave" , Date: Fri, 12 Nov 2004 23:32:21 -0800 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 In-Reply-To: <000501c4c934$21a46200$0200a8c0@satellite> cc: Drew Tomlinson Subject: RE: limiting ssh logins X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Nov 2004 07:32:27 -0000 See the MaxStartups parameter in the sshd_confg. Ted > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of dave > Sent: Friday, November 12, 2004 7:52 PM > To: freebsd-questions@freebsd.org > Cc: Drew Tomlinson > Subject: limiting ssh logins > > > Hello, > I'm wondering if it's possible to use pam or perhaps tcp_wrappers to > limit how many ssh logins can be atempted? I'd like to kick off a user who > tries to log in repeatedly with the wrong password or tries x > times within a > minute, my purpose is to slow down hacking atempts in situations where > public key authentication is not possible. > Thanks. > Dave. > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >