From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nicolas Mailhot Subject: Re: repeated failed logons and ignoring them Date: Mon, 26 Jun 2006 16:20:35 +0200 Message-ID: <449FED33.1010607@laPoste.net> References: <200606260702.57739.tyche@ica.net> Mime-Version: 1.0 Content-Transfer-Encoding: Quoted-Printable Return-path: In-Reply-To: <200606260702.57739.tyche@ica.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1" To: tyche Cc: netfilter@lists.netfilter.org tyche a =C3=A9crit : > over the last few days, my server has been attacked. i would=20 > like to limit remote logon attempts by address so that if=20 > someone tries to logon from an ip address and fails 3 times,=20 > my computer will ignore repeated attempts from that ip=20 > address. any idea how to make a rule for this? You want to try something like pam_abl --=20 Nicolas Mailhot