High levels of breakin attempts

Tom Vilot tom at vilot.com
Mon Jan 10 21:40:56 PST 2005

Murray Taylor wrote:

>I havent checked forsure but could sysutils/ipa help.
>it can 'open/close' firewalls upon certain limit conditions...

The closest thing I have seen is portsentry.

However, portsentry is a different beast. I don't think it "knows" about 
attempts to log in via ssh.

In other words ... I don't think portsentry can say "Hey!! Wait a sec. 
There are no users such as those. In fact, this server doesn't allow 
logins from ANYONE except X Y and Z via ssh keys .... Okay, time to 
block this bonehead ....."

More information about the freebsd-questions mailing list