Mark Rogers wrote: > I am sure there are several ways to automatically block addresses > following several failed attempts, any simple suggestions for > something I might try? The OS is ubuntu-server, and as it's a > remotely hosted server it's quite important that I don't screw > something up that means I can't connect back in myself!
fail2ban and denyhosts are the two common ways of dealing with this. I've a distaste for fail2ban ever since I spent way too long trying to get a custom rule working, but really they each do approximately the same thing approximately as effectively. Just apt-get install one or the other and you'll immediately have some protection, denyhosts can be configured to talk to a big shared list of Bad Hosts which'd bump it up somewhat. -- Avi _______________________________________________ Peterboro mailing list Peterboro@mailman.lug.org.uk https://mailman.lug.org.uk/mailman/listinfo/peterboro
