thwarting repeated login attempts

Peter N. M. Hansteen peter at bsdly.net
Sat Jan 27 11:07:34 UTC 2007


Peter Matulis <pmatulis at sympatico.ca> writes:

> You can run OpenBSD's pf in combination with authpf.  This mechanism 
> will alter firewall rules based on successful SSH logins.

authpf is great, but even overload rules can go a long way towards
eliminating the original poster's problem, see eg the suggestions in
my tutorial at http://home.nuug.no/~peter/pf/en/bruteforce.html
(http://home.nuug.no/~peter/pf/ for the full manuscript in a variety
of formats).

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.


More information about the freebsd-questions mailing list