That looks like a pretty cool utility/daemon.  I would second the feature 
request on that!

A simple config screen to enable/disable it is probably all we would need to 
start with (and maybe the ability to set "X").  The list of applicable 
log-files could be pre-configured.  Anything "more advanced", a sysadmin could 
login to the console and further configure.

-AJ

  ----- Original Message ----- 
  From: Kevin Fason 
  To: [email protected] 
  Sent: Monday, January 21, 2008 3:23 PM
  Subject: [Efw-user] SSH Attack


  I actually put in a feature request to add fail2ban to EFW.  It basically 
watches the SSH logs and when it sees X number of bad accounts or password 
attempts it drops packets from that IP for a set amount of time.  I have it 
running on all my Linux servers.  works real well...
    http://fail2ban.sf.net



  -------------------------------------------------------------------------
  This SF.net email is sponsored by: Microsoft
  Defy all challenges. Microsoft(R) Visual Studio 2008.
  http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
  _______________________________________________
  Efw-user mailing list
  [email protected]
  https://lists.sourceforge.net/lists/listinfo/efw-user
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to