SSH IP blocking?

Bart Silverstrim bsilver at
Wed Apr 9 19:11:14 UTC 2008

Kent Borg wrote:
> Keith Clark wrote:
>> Is there a way to block ip addresses from attempting ssh
>> connections?  I noticed in my auth.log a few people trying to gain
>> access over and over again and would like to stop them.
> Be careful of automatically banning IP addresses, you might lock 
> yourself out.  

Unless you don't know where you're going to be logging in from, you can 
whitelist your IPs.  A positive and a negative feature, I suppose.

>Be careful of permanently banning addresses, you might
>  lockout something your don't want to lock out.

Denyhosts lets you specify a lifetime for the banned IP.

More information about the ubuntu-users mailing list