Re: Dictionary-Attacken auf courier-mta
Matthias Haegele wrote:
...
Ich benutze für sowas fail2ban. Der unterstützt ziemlich viele Plugins
...
Hast da mal nähere Infos zu sind das Pakete oder einfach "Scripte"
kannst mal nen Link posten?
(Bisher setze ich fail2ban nur rudimentär auf "nichtbenutzten Ports" ein
root@linux:/backup# apt-cache show fail2ban
Package: fail2ban
Priority: optional
Section: net
Installed-Size: 572
Maintainer: Yaroslav Halchenko <debian@onerussian.com>
Architecture: all
Version: 0.8.1-1
Depends: python-central (>= 0.5.8), python (>= 2.4), iptables, lsb-base
(>= 2.0-7)
Suggests: python-gamin, mailx
Filename: pool/main/f/fail2ban/fail2ban_0.8.1-1_all.deb
Size: 77272
MD5sum: b828163857f456271d6ea0615770eb18
SHA1: a9ed54f848c5467030c7f50bbccc92e4cc9d2bd2
SHA256: 6500bac44323e7a62a8fcd02fb01ad484db7d92ab9ff25586124ab5672264892
Description: bans IPs that cause multiple authentication errors
Monitors log files (e.g. /var/log/auth.log,
/var/log/apache/access.log) and temporarily or persistently bans
failure-prone addresses by updating existing firewall rules. The
software was completely rewritten at version 0.7.0 and now allows
easy specification of different actions to be taken such as to ban an
IP using iptables or hostsdeny rules, or simply to send a
notification email. Currently, by default, supports ssh/apache/vsftpd
but configuration can be easily extended for monitoring any other ASCII
file. All filters and actions are given in the config files, thus
fail2ban can be adopted to be used with a variety of files and
firewalls.
.
Homepage: http://www.fail2ban.org
Python-Version: current
Tag: admin::{automation,logging,monitoring}, implemented-in::python,
interface::commandline, interface::daemon, network::firewall,
protocol::ip, role::program,
security::{authentication,firewall,ids,log-analyzer}, use::login,
use::monitor, works-with::logfile, works-with::text,
works-with-format::plaintext
Viele Grüße
André
--
Personal weblog and more: http://bischof.homelinux.net
"Das Schwein trägt seinen Namen nicht umsonst" - Stilblüten aus
Kinderaufsätzen: (Geographie)
Jedes Jahr kann man sehen, wie der Po gewaltig anschwillt.
Reply to: