PAM: Authentication Attack?

[n j]

On Mon, Jun 23, 2014 at 2:46 AM, Chris Maness <chris at chrismaness.com> wrote:

> I tried that, but was not working.  It seemed to be some
> incompatibility with ipfw, and I figured it might be because I am
> running 10.0.  Maybe some changes in ipfw broke it.  It seemed easier
> to set up than using it with pf, but I got it working.  I like it
> better than denyhost that I had been running forever, as it covers
> more types of attacks.
>
> Thanks,
> Chirs KQ6UP
>
> On Sun, Jun 22, 2014 at 5:41 PM, andrew clarke <mail at ozzmosis.com> wrote:
> > On Sun 2014-06-22 08:28:29 UTC-0700, Chris Maness (chris at chrismaness.com)
> wrote:
> >
> >> After digging around I am going to use sshgaurd-pf.  Any opinions on
> >> this software?
> >
> > I use its brother, sshguard-ipfw. It works well, although the FreeBSD
> > port has a silly habit of disabling itself whenever you upgrade the
> > port.
>

I also use sshguard-ipfw and find it quite useful. The only problem I
experienced is that it core dumps on restart if there is a non-empty
blacklist (in /var/db/sshguard/blacklist.db).

-- 
Nino