Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-15 Thread Richard Marza
- Original Message - From: "KH" To: Sent: Sunday, November 15, 2009 6:22 AM Subject: Re: [gentoo-user] Blocking login attempts to sshd and vsftpd Richard Marza schrieb: I recently check my log files and discovered that there was a dictionary attack attempt on my daemons

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-15 Thread KH
Richard Marza schrieb: I recently check my log files and discovered that there was a dictionary attack attempt on my daemons. sshd and vsftpd were the primary targets. Is there a script or tool to block the offending IP addresses using iptables. Something that checks to see if a minimum of atte

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-15 Thread Neil Bothwick
On Sun, 15 Nov 2009 01:21:55 -0500, Walter Dnes wrote: > Have you considered not allowing password-based logins at all for ssh? > Use RSA keys instead. It's much easier, and much more secure. That doesn't stop the attempts. -- Neil Bothwick Quantum leap: (adj.) literally, to move by the sm

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-15 Thread Alan McKinnon
On Sunday 15 November 2009 08:21:55 Walter Dnes wrote: > On Sat, Nov 14, 2009 at 07:07:28PM -0500, Richard Marza wrote > > > Thank you for the information, I did find that denyhost and fail2ban in > > threads but there were issues with it not working properly. Some users > > created custom scripts

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-15 Thread Walter Dnes
On Sat, Nov 14, 2009 at 07:07:28PM -0500, Richard Marza wrote > Thank you for the information, I did find that denyhost and fail2ban in > threads but there were issues with it not working properly. Some users > created custom scripts to get the job done correctly. Have you considered not allo

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-14 Thread Richard Marza
- Original Message - From: "Alan McKinnon" To: Sent: Saturday, November 14, 2009 5:42 PM Subject: Re: [gentoo-user] Blocking login attempts to sshd and vsftpd On Saturday 14 November 2009 23:49:23 Richard Marza wrote: I recently check my log files and discovered that t

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-14 Thread Alan McKinnon
On Saturday 14 November 2009 23:49:23 Richard Marza wrote: > I recently check my log files and discovered that there was a dictionary > attack attempt on my daemons. sshd and vsftpd were the primary targets. Is > there a script or tool to block the offending IP addresses using iptables. > Something

Re: [gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-14 Thread Alex Schuster
Richard Marza writes: > I recently check my log files and discovered that there was a > dictionary attack attempt on my daemons. sshd and vsftpd were the > primary targets. Is there a script or tool to block the offending IP > addresses using iptables. Something that checks to see if a minimum

[gentoo-user] Blocking login attempts to sshd and vsftpd

2009-11-14 Thread Richard Marza
I recently check my log files and discovered that there was a dictionary attack attempt on my daemons. sshd and vsftpd were the primary targets. Is there a script or tool to block the offending IP addresses using iptables. Something that checks to see if a minimum of attempts has occured and blo