Re: iptables in linux

2011-11-23 Thread Tim
On Tue, 2011-11-22 at 23:52 -0500, jdow wrote: > ===8<--- > $IPTABLES -A INPUT -p tcp --syn --dport 22 -m recent --name sshattack --set > $IPTABLES -A INPUT -p tcp --dport 22 --syn -m recent --name sshattack \ >--rcheck --seconds 180 --hitcount 2 -j LOG --log-prefix 'SSH REJECT: ' \ >--log-

Re: iptables in linux

2011-11-22 Thread Roger
Thank you, much appreciated Roger > You might look at this functionality. Check out your man pages for any > interpretation you need. > > ===8<--- > $IPTABLES -A INPUT -p tcp --syn --dport 22 -m recent --name sshattack --set > $IPTABLES -A INPUT -p tcp --dport 22 --syn -m recent --name sshattack \

Re: iptables in linux

2011-11-22 Thread jdow
You might look at this functionality. Check out your man pages for any interpretation you need. ===8<--- $IPTABLES -A INPUT -p tcp --syn --dport 22 -m recent --name sshattack --set $IPTABLES -A INPUT -p tcp --dport 22 --syn -m recent --name sshattack \ --rcheck --seconds 180 --hitcount 2 -j LOG

Re: iptables in linux

2011-11-14 Thread Reindl Harald
Am 13.11.2011 01:52, schrieb Roger: > On Sat, 2011-11-12 at 20:37 +0100, Heinz Diehl wrote: >> On 12.11.2011, Roger wrote: >> >>> Is there a way to limit: >>> -number of log in attempts to 2, >>> -the duration of a log in attempt to 3 seconds or less >>> -the number of times a username can be t

Re: iptables in linux

2011-11-14 Thread Reindl Harald
Am 12.11.2011 11:19, schrieb Roger: > Is there a way to limit: > -number of log in attempts to 2, > -the duration of a log in attempt to 3 seconds or less > -the number of times a username can be tried, prefer it set at 2 and > then not again for 24 hours if it fails. trivial iptables -A INPUT

Re: iptables in linux

2011-11-12 Thread Joe Zeff
On 11/12/2011 04:52 PM, Roger wrote: > I read about this and am concerned that if my computer dies and I > replace mb or other components, the RSA key could be different and I > won't be able to log in with the previous RSA. > Not understanding the process made me a bit nervous. The key is store

Re: iptables in linux

2011-11-12 Thread Tom Horsley
On Sat, 12 Nov 2011 18:20:18 -0700 T.C. Hollingsworth wrote: > The "key" is just a file on your hard drive. As long as you back it > up you'll be fine. Yep. You can keep the same host key by backing up and restoring all the files: /etc/ssh/*key* I've been copying mine from release to release wh

Re: iptables in linux

2011-11-12 Thread T.C. Hollingsworth
On Sat, Nov 12, 2011 at 5:52 PM, Roger wrote: > On Sat, 2011-11-12 at 20:37 +0100, Heinz Diehl wrote: >> On 12.11.2011, Roger wrote: >> >> > Is there a way to limit: >> > -number of log in attempts to 2, >> > -the duration of a log in attempt to 3 seconds or less >> > -the number of times a userna

Re: iptables in linux

2011-11-12 Thread Roger
On Sat, 2011-11-12 at 20:37 +0100, Heinz Diehl wrote: > On 12.11.2011, Roger wrote: > > > Is there a way to limit: > > -number of log in attempts to 2, > > -the duration of a log in attempt to 3 seconds or less > > -the number of times a username can be tried, prefer it set at 2 and > > then not

Re: iptables in linux

2011-11-12 Thread Mike Williams
> On 12.11.2011, Roger wrote: > >> Is there a way to limit: >> -number of log in attempts to 2, >> -the duration of a log in attempt to 3 seconds or less >> -the number of times a username can be tried, prefer it set at 2 and >> then not again for 24 hours if it fails. > [] Here is what I use,

Re: iptables in linux

2011-11-12 Thread Heinz Diehl
On 12.11.2011, Roger wrote: > Is there a way to limit: > -number of log in attempts to 2, > -the duration of a log in attempt to 3 seconds or less > -the number of times a username can be tried, prefer it set at 2 and > then not again for 24 hours if it fails. [] Switch off login with passw

Re: iptables in linux

2011-11-12 Thread Craig White
On Sat, 2011-11-12 at 04:03 -0700, T.C. Hollingsworth wrote: > On Sat, Nov 12, 2011 at 3:19 AM, Roger wrote: > > Is there a way to limit: > > -number of log in attempts to 2, > > -the duration of a log in attempt to 3 seconds or less > > -the number of times a username can be tried, prefer it set

Re: iptables in linux

2011-11-12 Thread T.C. Hollingsworth
On Sat, Nov 12, 2011 at 3:19 AM, Roger wrote: > Is there a way to limit: > -number of log in attempts to 2, > -the duration of a log in attempt to 3 seconds or less > -the number of times a username can be tried, prefer it set at 2 and > then not again for 24 hours if it fails. "NumberOfPasswordP

Re: iptables in linux

2011-11-12 Thread Itamar Reis Peixoto
On Sat, Nov 12, 2011 at 8:19 AM, Roger wrote: > I'm learning about iptables... > I find the same ip address sometimes 100 times or more and trying the > same user name. > After reading and applying much of the help in google I have tried and > failed to achieve a successful result. > > for example

iptables in linux

2011-11-12 Thread Roger
I'm learning about iptables... I find the same ip address sometimes 100 times or more and trying the same user name. After reading and applying much of the help in google I have tried and failed to achieve a successful result. for example: /var/log/btmp shows: user ssh:notty Thu Nov 10 17:10 - 1