[SLL] bad login attempts

Clifford Snow jcs at snowandsnow.us
Sun Jul 20 18:22:13 PDT 2008


On Sun, 2008-07-20 at 15:05 -0700, Paul A. Franz, P.E. wrote:
> Some days I get hit with many thousands of login probes. A clip of a few entries from
> the logs follows. I've got a couple of questions.

I'll echo the comments about denyhost.  It just works.  While it does
take a while to recognize attempts, once it does then they are blocked.
denyhost is configurable to how quickly they are blocked and how long -
days - months - forever.  And it is easy to set up.

Clifford
 



More information about the linux-list mailing list