full-disclosure - reduction of brute force login attempts via SSH through iptables --hashlimit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <7da922bf0602281433r61df99een7341be16282a88db@mail.gmail.com>
Date: Tue Feb 28 22:33:29 2006
From: tastytastybeef at googlemail.com (Gary Leons)
Subject: reduction of brute force login attempts via SSH
	through iptables --hashlimit

On 2/28/06, GroundZero Security <fd@....org> wrote:
> you may be able to add a bogus ip (wow your l33t), but it wouldnt be of any use so...

Uhh, no use? -s accepts a netmask as well as addresses, it's not just
"add a bogus ip", I can effectively kick your machine off the network.
Apart from that the code looks very flimsy, I'll bet there's an
arbitrary command execution in there somewhere.

> instead of beeing a smartass why dont you provide a better solution for the people who are annoyed by
> those bruteforce attacks?

Why dont you parse the output of lastb -i, dumbass.