Re: bruteforce protection howto

["Andrew M.A. Cater" <amacater@galactic.demon.co.uk>]

On Sat, Mar 20, 2010 at 11:17:29PM +0100, Vadkan Jozsef wrote:
> Two pc's:
> 
> 1 - router
> 2 - logger
> 
> Situation: someone tries to bruteforce into a server, and the logger
> get's a log about it [e.g.: ssh login failed].
> 

fail2ban

> What's the best method to ban that ip [what is bruteforcig a server]
> what was logged on the logger?
> I need to ban the ip on the router pc.
> 

Lock down logger and server to accept only minimal connection attempts.

All best

AndyC