I’ve been using a lot of this lately:
iptables -A INPUT -s IP-ADDRESS -j DROP service iptables save
I’ve noticed that pop3 attempts aren’t being filtered by Fail2Ban; I’ve seen an increase in dictionary attacks on this port and have had to resort to manually banning the offenders. I’ve also installed a LogViewer in [...]
My first clue that Fail2Ban wasn’t working right: it wasn’t showing up in iptables -L. Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-ssh tcp — anywhere anywhere tcp dpt:ssh Chain fail2ban-ssh (1 references) target prot opt source destination RETURN all — anywhere anywhere
My second clue: Fail2Ban wasn’t displaying the configuration I [...]
Or what I learned after reading the logs of brute force attacks on our server.
The logs issued by the Logwatch daemon on our server weren’t pretty…they told a grim tale of the attacks that besieged our server daily. I resolved to do something about it
Securing SSH, a handy guide on the options [...]