On Wed, 31 May 2006, Peter Fraser wrote: > Expect I was not clear. > > Someone is attacking address 1, address 2, address 3, those > address are all blocked with respect to ssh. , but because he > is attacking those addresses, I want to stop an expected attack > on address 4. I never want to pass ssh on address 1, address 2 > or address 3 ever, I want to use the information that someone > was trying to ssh to those address to identify person as > an attacker.
Have a look at "denyhosts" (Google for that). -- A
