Re: [CentOS] Looking for recommendations for blocking hacking attempts

2009-07-09 Thread mark . hanna
If you are talking about restricting "hacking" attempts across multiple services (like ssh, smtp and http) then you are beginning to move into the realm of an IDS solution (like Snort) Currently I use denyhosts plus iptables blacklist for ssh on the servers side (plus multiple layers of firewal

Re: [CentOS] Looking for recommendations for blocking hacking attempts

2009-07-09 Thread Ron Loftin
On Thu, 2009-07-09 at 09:56 -0500, Neil Aggarwal wrote: > Hello: > > I have been looking into projects that will automatically > restrict hacking attempts on my servers running CentOS 5. > > I think the two top contenders are: > DenyHosts - http://denyhosts.sourceforge.net > Fail2ban