Re: Detecting Brute-Force and Dictionary attacks

El Jueves, 19 de Octubre de 2006 16:45, Joe Vieira escribió:
> If you just want to identify logon attempts just pay attention to your
> logwatch/ /var/log/secure or wherever you have it logging, if you want to
> deny access I recommend an iptables rule based off quick connections to
> port 22.  If you want to lock out I would look at pam_tally.
>
> Feel free to ask questions about any of these.
>

Moreover, if you want to keep malicius conexions banned , like those which are 
trying to make a bruteforce attack, you could chek out fail2ban.


-- 
Manuel Arostegui Ramirez.

Electronic Mail is not secure, may not be read every day, and should not
be used for urgent or sensitive issues.