I do the same thing. I change the ssh port to something random like 8739 and when I get my daily logwatch email I almost never see any ssh connection except from my ip.
-----Original Message----- From: James Beam [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2008 5:13 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Fail2Ban on CentQMT5.1.1 No, this server is purely spam/virus front end (more efficient than the ms equivalent for exchange) - no real users exist at all. I use smtproutes to forward the emails on to exchange once simscan has done its duty. My goal was to stop the ssh monkeys from running dictionary assaults day in and day out. -------------------------------------------------- From: "Phil Leinhauser" <[EMAIL PROTECTED]> Sent: Monday, November 17, 2008 3:45 PM To: <qmailtoaster-list@qmailtoaster.com> Subject: Re: [qmailtoaster] Fail2Ban on CentQMT5.1.1 > Do you aim fail2ban at your POP, IMAP, SMTP logs? Have you caught much > with it? > > > > -----Original message----- > From: "James Beam" [EMAIL PROTECTED] > Date: Mon, 17 Nov 2008 18:13:50 -0500 > To: qmailtoaster-list@qmailtoaster.com > Subject: Re: [qmailtoaster] Fail2Ban on CentQMT5.1.1 > >> Thanks - that did the trick! >> >> -------------------------------------------------- >> From: "Eric Shubert" <[EMAIL PROTECTED]> >> Sent: Monday, November 17, 2008 12:24 PM >> To: <qmailtoaster-list@qmailtoaster.com> >> Subject: Re: [qmailtoaster] Fail2Ban on CentQMT5.1.1 >> >> > James Beam wrote: >> >> Has anyone had any luck getting this to install via yum on 5.1.1? It >> >> is >> >> not being found in the repository when I try to install it via 'yum >> >> install fail2ban' >> >> >> >> I use this utility on my other *nix boxes with great success in >> >> keeping >> >> the pesky script kiddies out. >> >> >> >> Thanks in advance for your time folks. >> >> >> >> I highly recommend the CentQMT5.1.1 iso for anyone wanting to have a >> >> simple automated build, worked great out of the box (well no box but >> >> still...). >> >> >> > >> > Fail2ban appears to be in the rpmforge repo. QTP has a script that will >> > install that repo for you, albeit in a disabled state. >> > >> > After running qtp-install-rpmforge, you should be able to >> > # yum --enable-repo=rpmforge install fail2ban >> > >> > -- >> > -Eric 'shubes' >> > >> > >> > --------------------------------------------------------------------- >> > QmailToaster hosted by: VR Hosted <http://www.vr.org> >> > --------------------------------------------------------------------- >> > To unsubscribe, e-mail: [EMAIL PROTECTED] >> > For additional commands, e-mail: >> > [EMAIL PROTECTED] >> >> --------------------------------------------------------------------- >> QmailToaster hosted by: VR Hosted <http://www.vr.org> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> > > --------------------------------------------------------------------- > QmailToaster hosted by: VR Hosted <http://www.vr.org> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
