 | | | SSH Dictionary Attacks (does not work with EL3) | SSH Dictionary Attacks (does not work with EL3) 2006-01-12 - By Rainer Traut
Back
Hi,
Thomas Cameron schrieb:
> I know there are probably a million better ways to do this, but I just
> ran the following two commands on all my Internet facing machines:
>
> iptables -I INPUT -p tcp --dport 22 -m state --state NEW \
> -m recent --update --seconds 60 --hitcount 4 -j DROP
>
> iptables -I INPUT -p tcp --dport 22 -m state --state NEW \
> -m recent --set
>
> I got them from http://www.debian-administration.org/articles/187 and
> they seem to work quite nicely.
Thx, for this.
But I have couple of EL3 servers where I wanted to do this.
But EL3 does not seem to work:
iptables v1.2.8: Couldn't load match
`recent':/lib/iptables/libipt_recent.so: cannot open shared object file:
No such file or directory
find /lib/ -iname "*recent*"
shows:
/lib/modules/2.4.21-37.ELsmp/kernel/net/ipv4/netfilter/ipt_recent.o
I can modprobe the module, but that's all.
Is there a workaround for this?
Thx
Rainer
--
Taroon-list mailing list
Taroon-list@(protected)
https://www.redhat.com/mailman/listinfo/taroon-list
|
|
|