Chris’ Blog

Blocking SSH Brute Force attempts using iptables

After my recent break in I have looked into ways of protecting SSH and my server resources. I employ fail2ban on my main server, it has the resources to run such a programme - my Linksys NSLU2’s however do not. The solution is to use iptables to limit the number of connections any host can make in a given time frame. I wrote up a quick how to on this over at my wiki. Enjoy.

Tags: howto, iptables, kernel, Security, ssh

This entry was posted on Saturday, January 12th, 2008 at 3:53 pm and is filed under Debian, Internet, Linux, Security, Ubuntu. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to “Blocking SSH Brute Force attempts using iptables”

ALeX Says:
June 13th, 2008 at 8:27 am
Another possible solution is use iptables to count new connection.
You can see an exemple of iptables comand here:
http://www.logocomune.eu/blog/2008/06/nslu2debian-brute-force-attach-ssh.php

Blocking SSH Brute Force attempts using iptables

One Response to “Blocking SSH Brute Force attempts using iptables”

Leave a Reply