Re: help? fighting ssh user/password guessing attempts

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Thu, 16 Oct 2008 13:59:50 +0300
Cem Kayali <cemkayali%eticaret.com.tr@localhost> wrote:

> 
> Well, if someone interested in, i have custom created 'php script'
> run by a cron job and scans auth.log and then creates firewall rule
> if it detects brute force attacks and/or certain number of incorrect 
> authentiacations. It clears all rules occasionally. It may scan other 
> ports as well, such as pop, smtp, ftp.
> 
Does it actually help?  I'd say that that boils down to how long the
attacks last, versus how often you run the script.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb