[Gllug] Throttling failed connections

[andrew Black]

Jack Bertram wrote:
> A glance through logwatch this morning showed an alarming number of
> failed ssh attempts to log in from one IP address.  The package is up to
> date, so I don't suppose I was in any real danger (they were guessing
> lots of different usernames).  However, it occurs to me that there must
> be a generic way of greylisting IP addresses, so that if you rack up too
> many failed logins within a certain time period you are locked out for an
> increasing length of time from that IP address until you successfully
> log in.
> 
> 
> Before I go and do more research, can anyone suggest something that
> 'just works'?

VMS :-)

(discovered the hard way when my keyboard had a faulty key within my 
password)

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug