High levels of breakin attempts

[Tom Vilot]

Murray Taylor wrote:

>I havent checked forsure but could sysutils/ipa help.
>
>it can 'open/close' firewalls upon certain limit conditions...
>  
>

The closest thing I have seen is portsentry.

However, portsentry is a different beast. I don't think it "knows" about 
attempts to log in via ssh.

In other words ... I don't think portsentry can say "Hey!! Wait a sec. 
There are no users such as those. In fact, this server doesn't allow 
logins from ANYONE except X Y and Z via ssh keys .... Okay, time to 
block this bonehead ....."