Iptables Tricks - HowFlow

7
Vote

http://dclavijo.blogspot.com/2008/06/leo-en-el-blog-de-vlan7.html

Hardening SSH with IPTABLES External Link

Category: Networking | Tags: ssh iptables

blogspot.com — Whith this small tutorial you can prevent brute force attacks by banning any source ip for 60 seconds if it got 3 consecutive login fails.

Posted by

daedalus 4 months ago

3
Vote

Block SSH Brute Force Attacks with sshguard

Category: Networking | Tags: ssh blocking bruteforce sshguard syslog-ng iptables linux

0 Comments

HowFlow — sshguard was born for protecting SSH servers from the today's widespread brute force attacks, and evolved to an extensible log supervisor for blocking attacks to applications in real-time. It monitors logging activity and reacts to attacks by blocking their source addresses.

Posted by

aroedl 5 months ago

4
Vote

block w00tw00t scan-hosts with fail2ban File

Category: Networking | Tags: fail2ban server scan dfind w00tw00t attack iptables linux apache web security comments

1 Comment

HowFlow — here i explain my solution to ban a host that scans my system with dfind/w00tw00t. this solution requires a preinstalled fail2ban.

Posted by

idl0r 6 months ago

3
Vote

Blocking DFind scans (w00tw00t) with iptables

Category: Networking | Tags: linux iptables security web server dfind comments

1 Comment

HowFlow — If you find a lot of "w00tw00t" entries in your web server log files, this little script might be useful for you.

Posted by

aroedl 6 months ago