看板FB_security
標 題Re: Attacks on ssh port
發信站NCTU CSIE FreeBSD Server (Sun Sep 26 16:42:28 2004)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
On Fri, 24 Sep 2004 23:49:09 +0200, Alex de Kruijff
<
[email protected]> wrote:
> >
> > Then you can still see the attempts (and thus log the IP information
> > for contacting the abuse@ for the responsible IP controller) while
> > limiting your log sizes.
>
> This only logs the first tree catches (when the log attribuut is set)
> per rule. You may want to set this a little higher like 100.
>
while I agree my example of 3 was low (meant only to instruct) I would
say more along the lines of 25. if someone is hitting you 25 times in
a row and getting tagged by that rule, you can bet your butt it's not
a client of your's.
--
David D.W. Downey
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"