Redmond Militante <[EMAIL PROTECTED]> writes: > hello > > i'm interested in configuring PAM on my 4x system so that a user is locked out of > ignored if trying to log in unsuccessfully via ftp within the space of a minute or > so. i'm trying to eliminate brute force attacks... > > > can anyone point me towards some good tutorials on how to do this?
Good tutorials? I don't know, but there is source for the pam_tally module included in the tree on my -STABLE machine. Think it over carefully before enabling this kind of capability, though; you may be making brute force attacks somewhat harder, but a denial-of-service attack on specific users will become trivial. -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org:8088/~lowell/ _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"