[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: RFC: denyhosts



On Mon, Jan 16, 2006 at 08:04:33PM +0100, Marco Bertorello wrote:
> On Mon, 16 Jan 2006 13:29:14 -0500
> Justin Pryzby <justinpryzby@users.sourceforge.net> wrote:
> 
> > On Mon, Jan 16, 2006 at 07:24:25PM +0100, Marco Bertorello wrote:
> > > Hi,
> > > 
> > > I'm working on a new package called denyhosts.
> > > 
> > > The program is a python script that can monitor a log file
> > > (default /var/log/auth.log) for ssh brute-force attack attempts and
> > > block them adding an entry in /etc/hosts.deny.
> > How does it do so?  That is a configuration file (and not a conffile),
> > but AFAIK there is no interface allowing batch modification.
> 
> I don't understand... 
> 
> /etc/hosts.deny is a ASCII text file.
> 
> It can be manipulated also using a bash script, banally with somethings
> like:
> 
> echo "sshd: xxx.xxx.xxx.xxx"
> 
> But I think that I' ve not understood your question... :-(
Policy 10.7.4: "The owning package should also provide a program that
the other packages may use to modify the configuration file."

http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files

-- 
Clear skies,
Justin



Reply to: