full-disclosure - reduction of brute force login attempts via SSHthrough iptables --hashlimit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <16287.63.164.145.34.1141167132.squirrel@63.164.145.34>
Date: Tue Feb 28 22:51:51 2006
From: josh.berry at netschematics.com (Josh Berry)
Subject: reduction of brute force login attempts via 
	SSHthrough iptables --hashlimit

>> On 2/28/06, GroundZero Security <fd@....org> wrote:
>> you may be able to add a bogus ip (wow your l33t), but it wouldnt be of
>> any use so...

> Uhh, no use? -s accepts a netmask as well as addresses, it's not just
"add > a bogus ip", I can effectively kick your machine off the network.
> Apart from that the code looks very flimsy, I'll bet there's an
arbitrary > command execution in there somewhere.

>> instead of beeing a smartass why dont you provide a better solution
>> for the people who are annoyed by those bruteforce attacks?

> Why dont you parse the output of lastb -i, dumbass.

I guess it makes you feel bigger and better to be an @sshole on a public
mailing list but I don't think that anyone is impressed with the fact that
you aren't offering any better ideas; just name-calling and showing a low
maturity level.

Just wasted time, space, and email if you aren't going to provide a
solution or try and fix the script.

I could be wrong, but doesn't last/lastb show users have have logged
in/out.  Therefore it wouldn't necessarily catch brute-forcers (unless
they were actually successful)?

This guy was just trying to be helpful and demonstrate a way of blocking
(or attempting to block) brute-forcers.  You aren't providing any value,
just being a d!ck.

> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/