High levels of breakin attempts
Gene
listmail at Bomgardner.net
Mon Jan 10 21:16:33 PST 2005
Over the past few months there have been a remarkably high level of
brute force attacks logged by sshd. I was wondering, is there a way that
sshd (or some other package) can monitor login attempts and if more than
say 5 or 6 attempts are made to login from a particular ip address,
temporarily block that address (perhaps at the firewall)? It'd be real
satisfying to just dump the attackers' packets to the bit bucket and
slow 'em down a bit.
Thanx - Gene
More information about the freebsd-questions
mailing list