'sshdfilter' blocks ssh brute force attacks by reading sshd log output in real time and adding iptables rules based on authentication failures. Block rules are created by logging on with an invalid user name, or wrongly guessing the password for an existing account; they are removed after a week to maintain a small list of blocks. Tha package also comes with a LogWatch filter.
released on 20 July 2005
|License||Verified by||Verified on||Notes|
|SimplePermissiveNoNonWarranty||Janet Casey||20 July 2005|
Leaders and contributors
Resources and communication
|Weak prerequisite||LogWatch 6.1.x or later (to use LogWatch scripts)|
This entry (in part or in whole) was last reviewed on 20 July 2005.