>>>>> "j" == jludwig <wralphie@xxxxxxxxxxx> writes: j> A while back there was discussion on the list about a script that j> monitored /var/messages and /var/secure and would write a rule to j> block an IP address after "x" number of attempts to log in. DenyHosts: http://denyhosts.sf.net It's in extras, so if you have the extras repository set up, you can do "yum install denyhosts". - J<