One simple way to disable unauthorized TCP connections is to use tcpwrappers, 
controlled by files /etc/hosts.allow and /etc/hosts.deny. Using these, you can 
only allow trusted networks/hosts/domains and block the rest.


----- Original Message ----- 
From: Brian
To: port-cobalt@NetBSD.org
Sent: Wednesday, October 27, 2004 7:32 AM
Subject: monitoring utilities



Hi all;

What are the best utils to use to monitor incoming connection attempts?
  I only have a few regular users and I'd like to start blocking out
those who are persistently hitting my sshd etc.  I know a couple as
I've happened to be watching netstat but I'm not finding a log or
perhaps don't have enabled logging of unsuccessful connect attempts.

Thanks,

Brian

-- 
"To announce that there must be no criticism of the president, or that
we are to stand by the president, right or wrong, is not only
unpatriotic and servile, but is morally treasonable to the American
public."
-- Theodore Roosevelt, speaking on President Wilson's crackdown on
dissent after the U.S. entered W.W.I