Re: fail2ban increase loadaverage to 18

On 08/19/2012 06:06 AM, Max wrote:
> It is necessary to limit the number of connections to sshwithiptables,
> for example:
> /sbin/iptables -p tcp -syn -dport 22-m connlimit -connlimit-above 3 -j DROP

And do not forget:
echo "1" > /proc/sys/net/ipv4/tcp_syncookies

(note: there's even an example in /etc/sysctl.conf with a link to an
article explaining what syncookies are...)

Thomas