fail2ban & i like Debian
Wednesday, April 18th, 2007Few weeks ago i was Googling for some solution to block ssh bruteforce attacks dynamically generating firewall rules. The first thing i’ve tried was iptables -m recent. A pretty straightforward tutorial could be found here. But it didn’t suite, as it blocked ALL ip’s after any n connection, successful or not. It meant, that i could open only n shells to a remote host. For me it seemed annoying. Increasing n leads to usefullness degradation of this method, so i switched to the alternative one - sshguard. (more…)
For about a month i’m studying and trying to use 

