[mdlug] Restricted Remote Access Script

Richard Harding rharding at mitechie.com
Sat Jan 13 10:57:55 EST 2007


> Michael S. Mikowski wrote:
>> Hi Everyone:
>>
>> A while ago, someone (you know who you are, hopefully ;) 
>> had posted a way to use a reverse-ssh to access remote 
>> machines.
>>
>> My remote machine is getting hit with 1500+ dictionary 
>> login attempts per day, and I think its time to consider 
>> locking down ssh.  Could the original poster please give 
>> me a pointer or two?  I think its time to lock things 
>> down a little tighter.  Your help would be greatly 
>> appreciated.  

I use a script called Fail2Ban that watches the logs and auto adds 
firewall rules to block IPs that fail logins more than a specified 
number of times.

It might help with your brute force problem.

Rick



More information about the mdlug mailing list