[sllug-members]: SSH question

[agilmore at wirelessbeehive.com]

> I like authfail works as a charm. then I have other rules into my
> firewall which runs authfail as well.


I like denyhosts, which watches the sshd log and drops a row into hosts.deny.

yum install denyhosts
chkconfig denyhosts on
service denyhosts start

:)

It sounded like Mark was running a pretty old version of Fedora, so I'm
not sure if denyhosts is available for that version.

I just upgraded to Centos 5.1 for my firewall machine. EPEL (Fedora Extra
Packages for Enterprise Linux) had denyhosts, and it works well.

Andrew