Bug 90603 - [NEW PORT] security/sshit: Checks for SSH/FTP bruteforce and blocks given IPs
Summary: [NEW PORT] security/sshit: Checks for SSH/FTP bruteforce and blocks given IPs
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-12-18 15:40 UTC by Jui-Nan Lin
Modified: 2005-12-18 16:04 UTC (History)
0 users

See Also:

Attachments
sshit-0.5.shar (3.75 KB, text/plain)
2005-12-18 15:40 UTC, Jui-Nan Lin 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jui-Nan Lin 2005-12-18 15:40:02 UTC 
sshit is a perl script, which works along with ipfw, ipfw2, and pf.
It parses the output of syslogd, find out SSH/FTP bruteforce attacks.
If the number of failed login is more than a threshold that administarator
set, sshit will block the source IP via firewall for a while 
(administrators can set the period of blocking). 

WWW: http://anp.ath.cx/sshit/

Generated with FreeBSD Port Tools 0.63
Comment 1 Vanilla I. Shu freebsd_committer freebsd_triage 2005-12-18 16:04:19 UTC 
State Changed
From-To: open->closed

Committed, thanks.