On Sat, 7 May 2005, Marko Vojinovic wrote: > > I wrote a little script that adds an iptables rule to drop the attacking > > ip address for an hour then remove the block. An hour might be overkill, > > but they never come back from the same address. > Also, are you willing to share your script with us (I guess I could > learn from it)? Perhaps you could, I make no guarantees or boasts as to its function, suitability for any purpose or overall cleverness. I run it in a screen session as root, but it could be run in a variety of better ways. http://rrcs-24-106-25-221.west.biz.rr.com/autoblock.pl