Re: [gentoo-user] Break In attempts

2007-10-07 Thread Randy Barlow
Mick wrote: > Can you please advise what I could do to block IP addresses that have > repeatedly failed to log in? You can also have a look at denyhosts... -- Randy Barlow http://electronsweatshop.com -- [EMAIL PROTECTED] mailing list

Re: [gentoo-user] Break In attempts

2007-10-07 Thread Bertram Scharpf
Hi, Am Sonntag, 07. Okt 2007, 10:40:10 +0100 schrieb Mick: > Can you please advise what I could do to block IP addresses that have > repeatedly failed to log in? I am looking here at a server which over the > last week is being attacked daily with random usernames. So the only > constant in t

Re: [gentoo-user] Break In attempts

2007-10-07 Thread Mick
On Sunday 07 October 2007, Elias Probst wrote: > Am Sonntag, 7. Oktober 2007 11:40:10 schrieb Mick: > > Hi All, > > > > Can you please advise what I could do to block IP addresses that have > > repeatedly failed to log in? > > I think you're looking for: net-analyzer/fail2ban (http://www.fail2ban.o

RE: [gentoo-user] Break In attempts

2007-10-07 Thread Joost van Surksum
If you have iptables available in your kernel, a quick manual step could be to block all traffic incoming from that IP address. A statement like the following could work: iptables -I INPUT -s XXX.XXX.XXX.XXX -j DROP (This drops all traffic coming from IP address XXX... effectively, it simply loo

Re: [gentoo-user] Break In attempts

2007-10-07 Thread Elias Probst
Am Sonntag, 7. Oktober 2007 11:40:10 schrieb Mick: > Hi All, > > Can you please advise what I could do to block IP addresses that have > repeatedly failed to log in? I think you're looking for: net-analyzer/fail2ban (http://www.fail2ban.org) Regards, Elias P. -- A really nice number: "09:F9:11: