[Wolves] Light-weight fail2ban replacement - sshcan

Ron Wellsted ron at wellsted.org.uk
Thu Jan 27 12:40:41 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 27/01/11 12:08, Andy Jewell wrote:
> Guys,
> 
> Further to our discussion last night, here's the promised code for my light-weight fail2ban replacement. I've now come up with an ok name for it - sshcan (ssh crack attach neutraliser). Woo hoo.
> 
> Rather than flood your mailboxes with 130+ lines of gibberish, and risk the outgoing message being quarrantined because it contains "code", I've put it in a paste-bin: 
> 
> http://hpaste.org/43371/sshcanpy
> 
> An example of it's output/behaviour:
> 
> http://hpaste.org/43372/sshcan_output
> (The "warning: commands will be executed using /bin/sh" are from the "at" command, because I'm piping a command in with 'echo "....." | at'. I might address that later, possibly by piping stderr to /dev/null... :-)
> 
> Comments on a post-card please...
> 
> Regards,
> Andy D'Arcy Jewell
> SysMicro Linux Support
> 
> T:  +44 (0) 844 991 8804
> M: +44 (0) 7961 605631
> F:  +44 (0) 844 357 7020
> E:  andy.jewell at sysmicro.co.uk
> W: www.sysmicro.co.uk
> 
 Also on the Wolves lug website under Hints & tips
http://www.wolveslug.org.uk/node/130

- -- 
Ron Wellsted
ron at wellsted.org.uk http://www.wellsted.org.uk
N 52.567623, W 2.136111 Linux Counter No. 202120
Ekiga: 645022
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1BZwAACgkQ8lOfTmhjD3O/KgCfRuK1ObCCt1CKbLuAPjminpwU
6lQAoKR/I2LwOE2m6MsmSzP2s53o0Drl
=BFdh
-----END PGP SIGNATURE-----



More information about the Wolves mailing list