Hi,
I had the same issue, so I ended up developing a script to run
through the logs and match failed logins from the same IP during a given
time period. Whenever an IP address failed over a given amount of
logins, the script would generate a .htaccess file, thus preventing the
IP from
http://www.ossec.net/
It does what you said. It will monitor log files and put temporary blocks
on IPs, email reports, and is very customizable.
The default config is very effective.
On Fri, 27 Mar 2009, Filipe Azevedo wrote:
Hi,
I had the same issue, so I ended up developing a script
Hi all,
I am wondering whether Horde-IMP has this function for security concerns.
I used IMP as Horde authentication application.
But I logged there are plenty login failure record generated for IMP.
And the username is obivously generated from dictionary.
And the login retry period is so short
Take a look at a program called fail2ban to do thisworks pretty good imo.
Quoting Jacky Chan:
Hi all,
I am wondering whether Horde-IMP has this function for security concerns.
I used IMP as Horde authentication application.
But I logged there are plenty login failure record generated
