SSHD_config question

[Smoot Carl-Mitchell]

On Thu, 2008-08-14 at 23:05 +0200, John L Fjellstad wrote:
> Smoot Carl-Mitchell <smoot at tic.com> writes:
> 
> > You can do similar rate limiting with iptables on Linux systems.
> > Something like:
> >
> > iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --set
> > iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 300 --hitcount 10 -j DROP
> 
> You want to do it in the opposite order.

You are correct.  Thanks!
-- 
Smoot Carl-Mitchell
System/Network Architect
smoot at tic.com
+1 480 922 7313
cell: +1 602 421 9005