Re: [Samba] Preventing brute force password attacks

2012-04-18 Thread NdK
Il 17/04/2012 22:50, Robert Heller ha scritto: What *exactly* do you want to accomplish here? Do you really want to ban machines on your LAN from accessing your (office) server? Not a bad idea. In the good old times, a firewall was enough to keep bad guys out. But now you can find you're

[Samba] Preventing brute force password attacks

2012-04-17 Thread Ed Ravin
I was hoping to set up fail2ban to block IP addresses that generate too many Samba password failures, but it needs a syslog message with the IP address of the computer that failed password authentication. Unfortunately, Samba doesn't seem to do this in my environment. Here's a sample error

Re: [Samba] Preventing brute force password attacks

2012-04-17 Thread Robert Heller
At Tue, 17 Apr 2012 20:32:05 + (UTC) era...@panix.com (Ed Ravin) wrote: I was hoping to set up fail2ban to block IP addresses that generate too many Samba password failures, but it needs a syslog message with the IP address of the computer that failed password authentication.