Re: ssh scans

[Tobias Nygren <tnn%NetBSD.org@localhost>]

On Mon, 26 Oct 2009 12:42:57 -0700
David Wetzel <dave%turbocat.de@localhost> wrote:

> Hi,
> 
> I am seeing a lot of ssh scans and I am wondering if somebody has a  
> solution like adding the bad hosts temporary to pf.conf or so?

Here's a solution that was recommended to me over a year ago.
(Still haven't gotten around to testing it though)

http://johan.fredin.info/openbsd/block_ssh_bruteforce.html

-Tobias