Re: How to auto-ban access form certain IP addresses?

dnoyeB wrote:
I run an RH9 box and someone is constantly trying to break in over the last year. Its not remotely accessible in they way they are trying so I am not concerned. However, I wish I would shut down access from a certain ip address after so many attempts, and send an email to myself. As opposed to watching 1000s of entries in my log each day from the same address.

Is there a manual way to do this? I assume by editing config files for telnet,ssh, etc. Is there an automatic way to do this?

I'll give you a better way. Whois the ip and give them a voice call or email with the date and time of that attack. Don't just block it. Get the boy kicked off line.

--
If the Nazis had persecuted the Palestinians they would get at least some
sympathy.
-- The Iron Webmaster, 3589
nizkor http://www.giwersworld.org/nizkook/nizkook.phtml
environmentalism http://www.giwersworld.org/environment/aehb.phtml a9
.