08 May 2007 SSH Dictionary Attack Prevention with iptables

It is ideal to slow down the SSH dictionary attack when the infested host started to brute force the SSH authentication. There are many scripts/user-land daemons that perform monitoring and blocking. I prefer to use something that has less demand in memory/CPU usage. IPTables module provides a kernel level solution with little overhead.
(more…)

Tags: firewall, iptables, ssh, syslog

Posted by Hans-Henry Jakobsen

# logger -t MyProgram "This is a message"