31 Aug
2006
31 Aug
'06
2:57 a.m.
James Turnbull wrote:
Ken A wrote:
http://www.ossec.net/ fail2ban looks interesting too, but doesn't appear to allow whitelisting? That could be bad.. Ken Pacific.Net
The next release of BlockSSHd (http://blocksshd.sourceforge.net/) will support blocking Dovecot authentication failures using iptables. I am just re-writing the blocking engine at the moment.
Cool! I need this for ssh dictionary attacks anyways, so I'll test it out now and the when the Dovecot changes are ready, I'll test it further...
John
-- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Blvd Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5747