full-disclosure - reduction of brute force login attempts via SSHthrough iptables --hashlimit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4404D6E3.4060406@kharkerlake.net>
Date: Tue Feb 28 23:04:20 2006
From: full-disclosure at kharkerlake.net (Christian "Khark" Lauf)
Subject: reduction of brute force login attempts via
	SSHthrough iptables --hashlimit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ho,

Josh Berry wrote:

> I could be wrong, but doesn't last/lastb show users have have logged
> in/out.  Therefore it wouldn't necessarily catch brute-forcers (unless
> they were actually successful)?

Under Debian Sarge all failed/successfull logins and su-actions are
logged to /var/log/auth.log.
lastb isn't touched. Even if it exists.

Greetings,
  Christian "Khark" Lauf
- --
Christian "Khark" Lauf <khark@...rkerlake.net>
GPG: 0x6AADC60A | IRCnet/silcnyet: Khark
silcnyet-Fingerprint: 9424 E3BF B637 E1FC E355 BA7C 01CC 1B68 3A1C E330
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFEBNbjAaLWKGqtxgoRAocRAJwJBQS7op4/dFi34M2FRZoKlNQU7wCeOIsj
wRZHckIfnVlE3IpsZLVtNFE=
=ngQH
-----END PGP SIGNATURE-----