[Wylug-help] Security log message

[John Hodrien]

On Mon, 10 Mar 2008, chris at ascent.plus.com wrote:

> Have you tried using fail2ban:
>
> http://www.fail2ban.org/wiki/index.php/Main_Page
>
> I have used it successfully. It bans IP addresses for a length of time if
> three unsuccessful attempts are made.
>
> Fail2ban works well with Logwatch. Logwatch gives a daily email report of
> various aspects of your system.

I think snort was what I got in trouble with.  Whichever tool you configure,
make sure you configure it in such a way that you don't get "inconvenienced".

jh

-- 
"Madam, you have between your legs an instrument capable of giving pleasure to
  thousands - and all you can do is scratch it."
                                           -- Sir Thomas Beecham (to a cellist)