Mailinglist Archive: opensuse-security (232 mails)

< Previous Next >
Re: IDS software
  • From: Henning Hucke <h_hucke@xxxxxxxxxxxxxxxx>
  • Date: Fri, 7 Oct 2005 06:49:50 +0200 (CEST)
  • Message-id: <Pine.LNX.4.58.0510070647400.4121@xxxxxxxxxxxxxxxx>
On Thu, 6 Oct 2005, Dragan Andric wrote:

> [...]
> P.E. If somebody try an unauthorized login on a system after three
> atempt I would like to ban this adress for some time (24h)
> I have an idea how to resolve that using a log parsing and iproute
> command but I'm affraid that the performance of my server will drop
> dramaticly.

SSH might be a little problem in this scenario but "pam_tally" does
exactly this job...

Regards
Henning Hucke
--
The life which is unexamined is not worth living.
-- Plato

< Previous Next >
References