[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: failed root login attempts



also sprach Noah Meyerhans <noahm@debian.org> [2004.09.19.2219 +0200]:
> As an additional point against these scripts, they are host based.
> If I'm going to bother blackholing the source of these login
> attempts, I'm going to do it at the border.  Yes, I can write
> scripts to react to this kind of scanning and have it
> automatically manipulate access lists on the routers, I'm not sure
> I really like the idea.  I'm sort of leaning in that direction, at
> this point, though, just to shut up logcheck without telling it to
> ignore all failed root login attempts.

If you ask me, logcheck should learn how to evaluate log messages in
their context...

-- 
Please do not CC me when replying to lists; I read them!
 
 .''`.     martin f. krafft <madduck@debian.org>
: :'  :    proud Debian developer, admin, and user
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!

Attachment: signature.asc
Description: Digital signature


Reply to: