BlockHosts 2.2.0 (Default branch) |
|
|
BlockHosts is a script to record how many times a
local system is attacked, based on configurable
scanning of system logs for sshd or other
services. When a particular IP address exceeds a
configured number of failed login attempts, that
IP address is blocked using hosts.allow files, or
by using null-routing, or by using packet
filtering. An email notification facility is also
available.
License: Public Domain
Changes:
Logging and mail notification were improved.
Logwatch scripts are now included to provide
a summary of blockhosts activity. Mail can now be
set to send only if there are errors or warnings
or notice level messages.
|