[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[suse-security] Re: IDS software

To: suse-security@xxxxxxxx
Subject: [suse-security] Re: IDS software
From: Henning Hucke <h_hucke@xxxxxxxxxxxxxxxx>
Date: Fri, 7 Oct 2005 06:49:50 +0200 (CEST)
Delivered-to: mailing list suse-security@xxxxxxxx
In-reply-to: <006801c5ca88$2e34c360$3d00000a@xxxxxxxxxxxx>
List-help: <mailto:suse-security-help@suse.com>
List-post: <mailto:suse-security@suse.com>
List-subscribe: <mailto:suse-security-subscribe@suse.com>
List-unsubscribe: <mailto:suse-security-unsubscribe-suse=archive.cert.uni-stuttgart.de@suse.com>
Mail-followup-to: suse-security@xxxxxxxx
Mailing-list: contact suse-security-help@xxxxxxxx; run by ezmlm
Organization: aeon: think longer than you thought before
References: <006801c5ca88$2e34c360$3d00000a@xxxxxxxxxxxx>
User-agent: Pine/4.58 (lnx)

On Thu, 6 Oct 2005, Dragan Andric wrote:

> [...]
> P.E. If somebody try an unauthorized login on a system after three
> atempt I would like to ban this adress for some time (24h)
> I have an idea how to resolve that using a log parsing and iproute 
> command but I'm affraid that the performance of my server will drop
> dramaticly.

SSH might be a little problem in this scenario but "pam_tally" does 
exactly this job...

Regards
    Henning Hucke
-- 
The life which is unexamined is not worth living.
		-- Plato

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here

References:
- [suse-security] IDS software
  - From: Dragan Andric

Prev by Date: Re: [suse-security] IDS software
Next by Date: [suse-security] unsubscript
Previous by thread: Re: [suse-security] IDS software
Next by thread: [suse-security] unsubscript
Index(es):
- Date
- Thread