[Techtalk] 216 ssh login attempts, what to do?

Laurel Fan laurel.fan at gmail.com
Wed Oct 13 09:52:29 EST 2004


On Wed, 13 Oct 2004 16:36:07 +0100 (BST), David Sumbler
<david at aeolia.co.uk> wrote:
> But the OP's idea of blocking any log-in attempts from an IP with,
> say, three failed attempts in a short space of time seems an excellent
> one, yet nobody has addressed this.
> 
> Is it really not possible to do what she suggested?  (And if it isn't,
> then it should be!)

I know the pam_tally PAM module can lock out a user account after a
specified number of failed attempts.  I don't know if it or anything else can
act on an IP address...

-- 
Laurel Fan
http://dreadnought.gorgorg.org


More information about the Techtalk mailing list