SSH IP blocking?
bsilver at chrononomicon.com
Wed Apr 9 19:11:14 UTC 2008
Kent Borg wrote:
> Keith Clark wrote:
>> Is there a way to block ip addresses from attempting ssh
>> connections? I noticed in my auth.log a few people trying to gain
>> access over and over again and would like to stop them.
> Be careful of automatically banning IP addresses, you might lock
> yourself out.
Unless you don't know where you're going to be logging in from, you can
whitelist your IPs. A positive and a negative feature, I suppose.
>Be careful of permanently banning addresses, you might
> lockout something your don't want to lock out.
Denyhosts lets you specify a lifetime for the banned IP.
More information about the ubuntu-users