hello I am attempting create a tarpit to protect against SSH Brute force attempts. I tried this:
iptables -N SSH_Brute_Force iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j SSH_Brute_Force iptables -A SSH_Brute_Force -s 192.168.1.254 -j RETURN iptables -A SSH_Brute_Force -m recent --name SSH --set --rsource iptables -A SSH_Brute_Force -m recent ! --rcheck --seconds 60 --hitcount 3 --name SSH --rsource -j RETURN iptables -A SSH_Brute_Force -j LOG --log-prefix "SSH Brute Force Attempt: " iptables -A SSH_Brute_Force -p tcp -j TARPIT After I type the last command typed I got this error message: iptables: No chain/target/match by that name What am I doing wrong? Here is the website I used as a reference for the tarpit: http://lists.netfilter.org/pipermail/netfilter/2005-June/060914.html -- gentoo-user@gentoo.org mailing list
