Re: High levels of breakin attempts

2005-01-11 Thread Carleton Vaughn
Lowell Gilbert wrote: Always remember, however, to be careful that this doesn't open you up to an easy denial-of-service attack. If all somebody has to do is try to log in a half-dozen times to lock out the IP address they're connecting from, you may be making it possible for them to attack your o

Re: High levels of breakin attempts

2005-01-11 Thread Lowell Gilbert
Carleton Vaughn <[EMAIL PROTECTED]> writes: > Gene wrote: > > Over the past few months there have been a remarkably high level of > > brute force attacks logged by sshd. I was wondering, is there a way > > that sshd (or some other package) can monitor login attempts and if > > more than say 5 or

Re: High levels of breakin attempts

2005-01-11 Thread Carleton Vaughn
Gene wrote: Over the past few months there have been a remarkably high level of brute force attacks logged by sshd. I was wondering, is there a way that sshd (or some other package) can monitor login attempts and if more than say 5 or 6 attempts are made to login from a particular ip address,

RE: High levels of breakin attempts

2005-01-11 Thread Ted Mittelstaedt
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Erik Norgaard > Sent: Tuesday, January 11, 2005 12:43 AM > To: Ted Mittelstaedt > Cc: Gene; [EMAIL PROTECTED] ORG > Subject: Re: High levels of breakin attempts > > > Ted Mi

Re: High levels of breakin attempts

2005-01-11 Thread Erik Norgaard
Ted Mittelstaedt wrote: Yes Eric, just write a FAQ answer and post it per the following: http://www.freebsd.org/docproj/submitting.html Thanks for volunteering! I'll take a look at it, but on the documentation list there was recently a discussion as to what to do with the FAQ: Merge it into the ha

RE: High levels of breakin attempts

2005-01-11 Thread Ted Mittelstaedt
2:12 AM > To: Gene > Cc: [EMAIL PROTECTED] ORG > Subject: Re: High levels of breakin attempts > > > Gene wrote: > > Over the past few months there have been a remarkably high level of > > brute force attacks logged by sshd. I was wondering, is > there a way that

Re: High levels of breakin attempts

2005-01-11 Thread Erik Norgaard
Gene wrote: Over the past few months there have been a remarkably high level of brute force attacks logged by sshd. I was wondering, is there a way that sshd (or some other package) can monitor login attempts and if more than say 5 or 6 attempts are made to login from a particular ip address,

Re: High levels of breakin attempts

2005-01-10 Thread Tom Vilot
Murray Taylor wrote: I havent checked forsure but could sysutils/ipa help. it can 'open/close' firewalls upon certain limit conditions... The closest thing I have seen is portsentry. However, portsentry is a different beast. I don't think it "knows" about attempts to log in via ssh. In other w

RE: High levels of breakin attempts

2005-01-10 Thread Murray Taylor
> Gene wrote: > > > Over the past few months there have been a remarkably high > level of > > brute force attacks logged by sshd. I was wondering, is there a way > > that sshd (or some other package) can monitor login attempts and if > > more than say 5 or 6 attempts are made to login from a

Re: High levels of breakin attempts

2005-01-10 Thread Tom Vilot
Gene wrote: Over the past few months there have been a remarkably high level of brute force attacks logged by sshd. I was wondering, is there a way that sshd (or some other package) can monitor login attempts and if more than say 5 or 6 attempts are made to login from a particular ip address,