Re: Temporarily blocking ports

2008-11-30 Thread Jos Chrispijn
Thank you all for your help! Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Temporarily blocking ports

2008-11-29 Thread Jos Chrispijn
Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... regards, Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list

Re: Temporarily blocking ports

2008-11-29 Thread Anthony M. Rasat
Jos Chrispijn wrote: Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... I think I saw ssh-ipfw section in jail.conf file of fail2ban application (http://www.fail2ban.org). I believe fail2ban might be the

Re: Temporarily blocking ports

2008-11-29 Thread Chris
On Nov 29, 2008, at 11:39 AM, Jos Chrispijn wrote: Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... If you mean the statement as entered while you are watching, something like: ipfw add 0922 deny

Re: Temporarily blocking ports

2008-11-29 Thread Glen Barber
On Sat, Nov 29, 2008 at 2:39 PM, Jos Chrispijn [EMAIL PROTECTED] wrote: Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... You could also take a look at sshguard.

Re: Temporarily blocking ports

2008-11-29 Thread Sahil Tandon
Jos Chrispijn [EMAIL PROTECTED] wrote: Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... security/sshguard-ipfw -- Sahil Tandon [EMAIL PROTECTED] ___

Re: Temporarily blocking ports

2008-11-29 Thread Jos Chrispijn
From your reply on my message of 29-11-2008 21:47: An even tighter practice is to turn off all password logins and use only keyed connections. This is easier than it might seem though I'll admit I think of ssh as something only a select number of users may use and thus you know them by name and

Re: Temporarily blocking ports

2008-11-29 Thread Jos Chrispijn
From your reply on my message of 29-11-2008 21:47: You could also take a look at sshguard. Good suggestion, I will do that. thanks for sharing, Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list

Re: Temporarily blocking ports

2008-11-29 Thread Chris
On Nov 29, 2008, at 1:11 PM, Jos Chrispijn wrote: From your reply on my message of 29-11-2008 21:47: An even tighter practice is to turn off all password logins and use only keyed connections. This is easier than it might seem though I'll admit I think of ssh as something only a select

Re: Temporarily blocking ports

2008-11-29 Thread andrew clarke
On Sat 2008-11-29 20:39:47 UTC+0100, Jos Chrispijn ([EMAIL PROTECTED]) wrote: Can someone hint me how I can block ports for let's say 30 minutes if someone repeatedly tries to do a SSH login? I use ipfw as firewall... security/sshguard-ipfw works well for me.

Re: Temporarily blocking ports

2008-11-29 Thread Manolis Kiagias
Chris wrote: On Nov 29, 2008, at 1:11 PM, Jos Chrispijn wrote: From your reply on my message of 29-11-2008 21:47: An even tighter practice is to turn off all password logins and use only keyed connections. This is easier than it might seem though I'll admit I think of ssh as something only