[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PAM tarpit module for repeated SSH login attempts

On Wed, Oct 20, 2004 at 02:43:43PM +0200, Martin Reising wrote:
Yes, it looks like an easy solution, but remembering the ip connection
count, to calculate the sleeptime, should be taken inside the application
and not inside the module, IMHO.

You'd then have to implement it in every application rather than doing
it once in pam. If someone's trying to brute force you they may well use
more than one vector.

Mike Stone

Reply to: