ssh prevent scanning
This is a discussion on ssh prevent scanning within the Linux Networking forums, part of the Linux Forums category; Hi Someone is guesting the password for ssh. How can i board his IP if he fail the password over ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-19-2007
|
|||
|
|||
Re: ssh prevent scanning
On Mon, 19 Feb 2007 06:10:37 -0800, cmk128 wrote:
> Hi > Someone is guesting the password for ssh. How can i board his IP if > he fail the password over a few times? > thanks > from Peter (cmk128@hotmail.com) This what I use - no-one is allowed more than 3 login attempts within any 25 second interval. iptables -A INPUT -p tcp --dport 22 -i eth0 -m state --state NEW \ -m recent --set iptables -A INPUT -p tcp --dport 22 -i eth0 -m state --state NEW \ -m recent --update --seconds 25 --hitcount 4 -j DROP 
|
Linear Mode
