On Mon, 2005-05-09 at 16:37 +0200, roland brouwers wrote: > Hello everybody, > > Someone is attacking for a certain time on port SSH2 > He is trying to login as root and uses all kind of usernames. > See annexed textfile > > How can I block a user after x failed logins? > Can I do something else? I use the swatch daemon to move them to the firewall after one attempt. I believe that there is a swatch rpm in extras. -- Multi-RBL Check: http://www.TQMcube.com/rblcheck.htm Kill Spam at the Source: http://www.TQMcube.com/spam_trap.htm Today's Spam Trap Adds: http://www.TQMcube.com/BlockedToday RBLDNSD HowTo: http://www.TQMcube.com/rbldnsd.htm
