limiting brute force attacks

[lars at gmx.at]

Karol Kwiatkowski wrote:
> Michael P. Soulier wrote:
>> Hey people,
>>
>> I've seen some efforts from the netfilter community on Linux to provide a
>> means to limit brute-force attacks via firewall rules. Can anyone suggest a
>> way to do the same on FreeBSD? 
>>
>> I'm primarily interested in limiting attacks on sshd. I already use RSA auth,
>> but I like defense-in-depth. 
> 
> Hi Michael,
> 
> you can use pf firewall (probably others, too) to limit/refuse
> incoming connections. Have a look at Niki Denev's post @stable:
> 
> http://lists.freebsd.org/pipermail/freebsd-stable/2006-February/022616.html
> 
> Regards,
> 
> Karol
> 
And maybe you would care to look at the archive
where this question has been asked and answered many times.

Kind regards
lars.