Re: PAM tarpit module for repeated SSH login attempts

[Michael Stone <mstone@debian.org>]

On Wed, Oct 20, 2004 at 02:43:43PM +0200, Martin Reising wrote:
> Yes, it looks like an easy solution, but remembering the ip connection
> count, to calculate the sleeptime, should be taken inside the application
> and not inside the module, IMHO. 

You'd then have to implement it in every application rather than doing
it once in pam. If someone's trying to brute force you they may well use
more than one vector.

Mike Stone