From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-security+bounces-275-garchives=archives.gentoo.org@lists.gentoo.org>) id 1RKiyT-0005Cg-Uu for garchives@archives.gentoo.org; Mon, 31 Oct 2011 03:55:50 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8E03721C045 for <garchives@archives.gentoo.org>; Mon, 31 Oct 2011 03:55:49 +0000 (UTC) Received: from mail.wirelesscal.com (ns1.unixtime.net [68.122.197.226]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j92Lfei3003299 for <gentoo-security@lists.gentoo.org>; Sun, 2 Oct 2005 21:41:40 GMT Received: (qmail 3835 invoked from network); 2 Oct 2005 11:04:31 -0700 Received: from debian.unixtime.net (HELO multimedia) (68.122.197.230) by mail.wirelesscal.com with (AES128-SHA encrypted) SMTP; 2 Oct 2005 11:04:31 -0700 Received: from multimedia by multimedia (PGP Universal service); Sun, 02 Oct 2005 14:53:40 -0800 From: "Hassan El-Masri" <hassan@unixtime.net> To: <gentoo-security@lists.gentoo.org> Subject: RE: [gentoo-security] [OT?] automatically firewalling off IPs Date: Sun, 2 Oct 2005 14:53:38 -0700 Organization: OBSDI Inc. Precedence: bulk List-Post: <mailto:gentoo-security@lists.gentoo.org> List-Help: <mailto:gentoo-security+help@gentoo.org> List-Unsubscribe: <mailto:gentoo-security+unsubscribe@gentoo.org> List-Subscribe: <mailto:gentoo-security+subscribe@gentoo.org> List-Id: Gentoo Linux mail <gentoo-security.gentoo.org> X-BeenThere: gentoo-security@gentoo.org Reply-to: gentoo-security@lists.gentoo.org MIME-Version: 1.0 Message-ID: <001d01c5c79b$bfef0c60$1464a8c0@multimedia> X-Mailer: Microsoft Office Outlook 11 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0018_01C5C761.11B81900" Thread-Index: AcXHd6j7goIu/+nVSd+4XrgRxGvOkgAI9d2w In-Reply-To: <43404CB8.3@lunatic.net.nz> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 X-Archives-Salt: 413ed3ca-6967-4a57-85dd-50ea9ad02b30 X-Archives-Hash: dec2d024c010c41832948b03b3c9f949 This is a multi-part message in MIME format. ------=_NextPart_000_0018_01C5C761.11B81900 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Try DenyHosts http://denyhosts.sourceforge.net/faq.html ~Hassan -----Original Message----- From: Jeremy Brake [mailto:gentoolists@lunatic.net.nz] Sent: Sunday, October 02, 2005 2:10 PM To: gentoo-security@lists.gentoo.org Subject: [gentoo-security] [OT?] automatically firewalling off IPs Hey all, I'm looking for an app/script which can monitor for failed ssh logins, and block using IPTables for $time after $number of failed logins (an exclusion list would be handy as well) so that I can put a quick stop to these niggly brute-force ssh "attacks" I seem to be getting more and more often. Anyone have any ideas? Thanks, Jeremy B -- gentoo-security@gentoo.org mailing list ------=_NextPart_000_0018_01C5C761.11B81900 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIINBzCCAlow ggHDAgIBpTANBgkqhkiG9w0BAQQFADB1MQswCQYDVQQGEwJVUzEYMBYGA1UEChMPR1RFIENvcnBv cmF0aW9uMScwJQYDVQQLEx5HVEUgQ3liZXJUcnVzdCBTb2x1dGlvbnMsIEluYy4xIzAhBgNVBAMT GkdURSBDeWJlclRydXN0IEdsb2JhbCBSb290MB4XDTk4MDgxMzAwMjkwMFoXDTE4MDgxMzIzNTkw MFowdTELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0dURSBDb3Jwb3JhdGlvbjEnMCUGA1UECxMeR1RF IEN5YmVyVHJ1c3QgU29sdXRpb25zLCBJbmMuMSMwIQYDVQQDExpHVEUgQ3liZXJUcnVzdCBHbG9i YWwgUm9vdDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAlQ+gtvBQnOh6x4jN3RcOLrCU0Bs9 DvaUwIqUxwbIkJfIuGQaen5sPFPhNyhzYH+yl1MHn1P5bViU0q+NbYhngObtspXPcjHKpRxyulwC 52RC5/mpLNY6DayNQqokATnmnD8BhVcNWIdF+NOFqpNpJoVwSIA/EhXHebQfBS87YpkCAwEAATAN BgkqhkiG9w0BAQQFAAOBgQBt6xsJ6V7ZUdtnImGkKjxId+OgfKbec6IUA4U9+6sOMMWDFjOBEwie ezRO30DIdNe5fdz0dlV9m2NUGOnw6vNcsdmLQh65wJVOuvrV4nz1aGG/juwFl19bsNejhTTEJKcN D5WT78uU2J4fnVyFbceqrk8fIrXNla26p8z5qwt6fzCCBSowggSToAMCAQICBAIAApowDQYJKoZI hvcNAQEFBQAwdTELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0dURSBDb3Jwb3JhdGlvbjEnMCUGA1UE CxMeR1RFIEN5YmVyVHJ1c3QgU29sdXRpb25zLCBJbmMuMSMwIQYDVQQDExpHVEUgQ3liZXJUcnVz dCBHbG9iYWwgUm9vdDAeFw0wMjA4MjcxOTAyMDBaFw0xMjA4MjcyMzU5MDBaMIHcMQswCQYDVQQG EwJHQjEXMBUGA1UEChMOQ29tb2RvIExpbWl0ZWQxHTAbBgNVBAsTFENvbW9kbyBUcnVzdCBOZXR3 b3JrMUYwRAYDVQQLEz1UZXJtcyBhbmQgQ29uZGl0aW9ucyBvZiB1c2U6IGh0dHA6Ly93d3cuY29t b2RvLm5ldC9yZXBvc2l0b3J5MR8wHQYDVQQLExYoYykyMDAyIENvbW9kbyBMaW1pdGVkMSwwKgYD VQQDEyNDb21vZG8gQ2xhc3MgMyBTZWN1cml0eSBTZXJ2aWNlcyBDQTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAPIMts+HhOoKcRRSLehXXElSOs/D8EJtYvL+puk+PHhkAw4gfmtraYeJ VDgF9NrHBUAFGHd+/GuLDhyigsyshZs56ctLSBhIayjkwtFbrgOpfpgvTBNx37ApDE6qpjcmOLnQ RFKCkD5wSNZ6mwkHvJTk9FUs8rcqvhyRHGqLg001bBDhc9oh2WLY8Rmw8ecgjbWXRyNLaoE1G69I 4DaokExNTOz1iM7GsdAv/3mQAdhRZOcvsQiNXc+t+rKAlqusi7VMtHTCRxPt6CMx9Cq5YRu9zqRb NzG95Zyc+7IP18U7v8xaqw/IhkCJIqaQINOzbL4S8+MgLLvBrkNa2hZ26B8CAwEAAaOCAdkwggHV MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly93d3cucHVibGljLXRydXN0LmNvbS9jZ2ktYmluL0NS TC8yMDE4L2NkcC5jcmwwHQYDVR0OBBYEFDbg6HxtnUWR7pnlQnZNcLNQMKxeMIGSBgNVHSAEgYow gYcwSQYKKoZIhvhjAQIBBTA7MDkGCCsGAQUFBwIBFi1odHRwOi8vd3d3LnB1YmxpYy10cnVzdC5j b20vQ1BTL09tbmlSb290Lmh0bWwwOgYMKwYBBAGyMQECAQMBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vc2VjdXJlLmNvbW9kby5uZXQvQ1AwgYkGA1UdIwSBgTB/oXmkdzB1MQswCQYDVQQGEwJVUzEY MBYGA1UEChMPR1RFIENvcnBvcmF0aW9uMScwJQYDVQQLEx5HVEUgQ3liZXJUcnVzdCBTb2x1dGlv bnMsIEluYy4xIzAhBgNVBAMTGkdURSBDeWJlclRydXN0IEdsb2JhbCBSb290ggIBpTArBgNVHRAE JDAigA8yMDAyMDgyNzE5MDIyNFqBDzIwMDkwODI3MjM1OTAwWjAOBgNVHQ8BAf8EBAMCAeYwDwYD VR0TBAgwBgEB/wIBADANBgkqhkiG9w0BAQUFAAOBgQA6HiRv2ts2bP46czndzWocaaEAH2/UrtUf 1IgppSHCV/ZVezDn0mTWDsSqcDx2dOIqrsdGZzKSyUvxp9fgVrz2chCdf7B11p1XtXGFqsQ6p0u4 7A/m0vj/tc3URSWs6ganirXNMiLkIZIb7840rjBEGu6bf/CUEYaKhxkBKDrPszCCBXcwggRfoAMC AQICEQD7ajjTK/0zTEGUTCuYO06bMA0GCSqGSIb3DQEBBQUAMIHcMQswCQYDVQQGEwJHQjEXMBUG A1UEChMOQ29tb2RvIExpbWl0ZWQxHTAbBgNVBAsTFENvbW9kbyBUcnVzdCBOZXR3b3JrMUYwRAYD VQQLEz1UZXJtcyBhbmQgQ29uZGl0aW9ucyBvZiB1c2U6IGh0dHA6Ly93d3cuY29tb2RvLm5ldC9y ZXBvc2l0b3J5MR8wHQYDVQQLExYoYykyMDAyIENvbW9kbyBMaW1pdGVkMSwwKgYDVQQDEyNDb21v ZG8gQ2xhc3MgMyBTZWN1cml0eSBTZXJ2aWNlcyBDQTAeFw0wNTA5MjkwMDAwMDBaFw0wNjA5Mjky MzU5NTlaMIHeMTUwMwYDVQQLEyxDb21vZG8gVHJ1c3QgTmV0d29yayAtIFBFUlNPTkEgTk9UIFZB TElEQVRFRDFGMEQGA1UECxM9VGVybXMgYW5kIENvbmRpdGlvbnMgb2YgdXNlOiBodHRwOi8vd3d3 LmNvbW9kby5uZXQvcmVwb3NpdG9yeTEfMB0GA1UECxMWKGMpMjAwMyBDb21vZG8gTGltaXRlZDEY MBYGA1UEAxMPSGFzc2FuIEVsLU1hc3JpMSIwIAYJKoZIhvcNAQkBFhNoYXNzYW5AdW5peHRpbWUu bmV0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTiHa255J6Ig4JOQ0zgiIraVTc5tjOi3gu AE+UNuuD7mVPr4XfnR+opqinZnsEQIutPUE6PritLWTwJ+MXgXgR8PWnH4K+zrc0YMpMHe2KTugD Dhcw5dq/9y19a+L4xRZ5TmLw/AX5QpOAdYlc7y3YU5PzeFtlcP01RCIKQ7TwUwIDAQABo4IBsjCC Aa4wHwYDVR0jBBgwFoAUNuDofG2dRZHumeVCdk1ws1AwrF4wHQYDVR0OBBYEFP/kO2l8yiWYbjbe ocYS34czheMrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUF BwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIx AQIBAQEwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwgbAGA1Ud HwSBqDCBpTA4oDagNIYyaHR0cDovL2NybC5jb21vZG8ubmV0L0NsYXNzM1NlY3VyaXR5U2Vydmlj ZXNfMy5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NsYXNzM1NlY3VyaXR5U2Vy dmljZXNfMy5jcmwwLaAroCmBJ0NsYXNzM1NlY3VyaXR5U2VydmljZXNfM0BjcmwuY29tb2RvLm5l dDAeBgNVHREEFzAVgRNoYXNzYW5AdW5peHRpbWUubmV0MA0GCSqGSIb3DQEBBQUAA4IBAQCjtrmS zfU6AQjIq5/2S5HEykvea8UWtjW2WxWyQGW/8DexFXz+rhlUxzLIRlsshEYhhm/KPahWnfoVPClE lpZHzJ45zCc0rX62/S6PrubT+/BSfMqwXYsazoH44BUSGoAZEooPeWWywwzu1A6DKKXBzeOZlhOA 0vvplaR37u7FLX0wyilvxQufoGqpxC293rGJUQVtMo6NFkO6QgonboG3MvqYEig5bGlcJAuOKT6/ OtvNYxxjzEY2I5lfb7r355msClXQcmZGJKo94klAV6xP6dUyxT4N2hI+60KBg5vqjWkv0irP5aA1 5J67LQBZ3RT8aAetJj3+03+AhCbLxA0cMYIEczCCBG8CAQEwgfIwgdwxCzAJBgNVBAYTAkdCMRcw FQYDVQQKEw5Db21vZG8gTGltaXRlZDEdMBsGA1UECxMUQ29tb2RvIFRydXN0IE5ldHdvcmsxRjBE BgNVBAsTPVRlcm1zIGFuZCBDb25kaXRpb25zIG9mIHVzZTogaHR0cDovL3d3dy5jb21vZG8ubmV0 L3JlcG9zaXRvcnkxHzAdBgNVBAsTFihjKTIwMDIgQ29tb2RvIExpbWl0ZWQxLDAqBgNVBAMTI0Nv bW9kbyBDbGFzcyAzIFNlY3VyaXR5IFNlcnZpY2VzIENBAhEA+2o40yv9M0xBlEwrmDtOmzAJBgUr DgMCGgUAoIIC1jAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wNTEw MDIyMTUzMzdaMCMGCSqGSIb3DQEJBDEWBBTx9Fea2wRGMBSeGenmjiMJlkWMDzBnBgkqhkiG9w0B CQ8xWjBYMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMC BzANBggqhkiG9w0DAgIBKDAHBgUrDgMCGjAKBggqhkiG9w0CBTCCAQMGCSsGAQQBgjcQBDGB9TCB 8jCB3DELMAkGA1UEBhMCR0IxFzAVBgNVBAoTDkNvbW9kbyBMaW1pdGVkMR0wGwYDVQQLExRDb21v ZG8gVHJ1c3QgTmV0d29yazFGMEQGA1UECxM9VGVybXMgYW5kIENvbmRpdGlvbnMgb2YgdXNlOiBo dHRwOi8vd3d3LmNvbW9kby5uZXQvcmVwb3NpdG9yeTEfMB0GA1UECxMWKGMpMjAwMiBDb21vZG8g TGltaXRlZDEsMCoGA1UEAxMjQ29tb2RvIENsYXNzIDMgU2VjdXJpdHkgU2VydmljZXMgQ0ECEQD7 ajjTK/0zTEGUTCuYO06bMIIBBQYLKoZIhvcNAQkQAgsxgfWggfIwgdwxCzAJBgNVBAYTAkdCMRcw FQYDVQQKEw5Db21vZG8gTGltaXRlZDEdMBsGA1UECxMUQ29tb2RvIFRydXN0IE5ldHdvcmsxRjBE BgNVBAsTPVRlcm1zIGFuZCBDb25kaXRpb25zIG9mIHVzZTogaHR0cDovL3d3dy5jb21vZG8ubmV0 L3JlcG9zaXRvcnkxHzAdBgNVBAsTFihjKTIwMDIgQ29tb2RvIExpbWl0ZWQxLDAqBgNVBAMTI0Nv bW9kbyBDbGFzcyAzIFNlY3VyaXR5IFNlcnZpY2VzIENBAhEA+2o40yv9M0xBlEwrmDtOmzANBgkq hkiG9w0BAQEFAASBgIfDQsc54JsQtNrezSQ7m1iQIhTZNZgOIIRL/LvIfUowPI+h+EIYaI0Jie// ut6qYWJqmfhWzqXXRxLkN7DuhpDP0fLu6dzamS0OJEPM7UPRw6gsqf2WCNo+CGT80ihcuxwrNJ8g GjlkWuLj/5dYoE0v9G2xXZyrwiT24naBoo0/AAAAAAAA ------=_NextPart_000_0018_01C5C761.11B81900-- -- gentoo-security@gentoo.org mailing list