This is an old revision of the document!
Internet services
Hardware
Cisco - vse o kiskotu
Windows
Linux
Logging is easy, just add the same rule but with a -j LOG –log-prefix
SSHBRUTE or whatever you want.
eg;
iptables -A INPUT -m hashlimit -m tcp -p tcp –dport 22 –hashlimit \
1/min –hashlimit-mode srcip –hashlimit-name ssh -m state \
–state NEW -j LOG –log-prefix SSHBRUTE
As for permantely adding hosts, why? Poluting a firewall ruleset with a
rule that isn't going to be hit frequently is a waste. Which is why the
hashlimit rule is perfect for this situation.
-miah
