LinuxSA Mailing list archives

  From: Shaun Etherton <shaun@recalldesign.com>
  To  : <mwestern@affairs.net.au>
        < linuxsa@linuxsa.org.au>
  Date: Wed, 21 Nov 2001 17:17:13 +1030

Re: Autoblocking

hi,

you could use portsentry, but i think it just drops the offending IP into
hosts.deny - not sure.


Matthew Western wrote:
> 
> Hi LinuxGurus,
> Is there a way in linux to detect naughty activity from the outside and
> autoblock that IP for a specified time?  say if someone port scans my box, i
> want to deny absoultly everything for a couple days for example at first,
> then if it happens again, deny for two weeks or something like that.  all
> logged etc etc.....
> anybody done that before?
> Thanks
> Matthew
> 
> --
> LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
> To unsubscribe from the LinuxSA list:
>   mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject

-- 
Regards
Shaun

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject