<html><head><style type="text/css"></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Thanks for the information!<br><br>Keith<br><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Owen Townend <owen.townend@gmail.com><br>To: "Ubuntu user technical support, not for general discussions" <ubuntu-users@lists.ubuntu.com><br>Sent: Wednesday, April 9, 2008 1:49:07 PM<br>Subject: Re: SSH IP blocking?<br><br><br><br><div><span class="gmail_quote">On 10/04/2008, <b class="gmail_sendername">Keith Clark</b> <<a rel="nofollow" ymailto="mailto:keithclark1966@rogers.com" target="_blank" href="mailto:keithclark1966@rogers.com">keithclark1966@rogers.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Is there a way to block ip addresses from attempting ssh connections? I noticed in my auth.log a few people trying to gain access over and over again and would like to stop them.<br><br> Thanks,<br><br> Keith</blockquote> <div><br>Hey<br> Have a look into /etc/hosts.deny<br> There is a man page for it that describes the syntax which includes IP/mask and FQDN. e.g.:<br>sshd: .au <a rel="nofollow" target="_blank" href="http://192.168.1.0/24">192.168.1.0/24</a> *owen*<br> This would block all domain names ending in .au, the IP range 192.168.1.x and any domain name with 'owen' in it.<br> An alternative would be to use 'sshd: ALL' in hosts.deny and selectively open access using hosts.allow<br> </div><br>cheers,<br>Owen.<br><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> --<br> ubuntu-users mailing list<br> <a rel="nofollow" ymailto="mailto:ubuntu-users@lists.ubuntu.com" target="_blank" href="mailto:ubuntu-users@lists.ubuntu.com">ubuntu-users@lists.ubuntu.com</a><br> Modify settings or unsubscribe at: <a rel="nofollow" target="_blank" href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a><br> </blockquote></div><br> <div><br><br>-----Inline Attachment Follows-----<br><br>-- <br>ubuntu-users mailing list<br><a ymailto="mailto:ubuntu-users@lists.ubuntu.com" href="mailto:ubuntu-users@lists.ubuntu.com">ubuntu-users@lists.ubuntu.com</a><br>Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a><br></div></div><br></div></div></body></html>