My colleague Ben at Datacenter Luxembourg has referred to another tool to reduce brute force attacks. The tool is called fail2ban. Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates … Continue reading →

I found this very nice tool called DenyHosts. DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks).

I’m using Fedora on one of my servers and I have had some troubles with SELinux. A few days ago I found this documentation about creating local policies. I will give the shown methods a try and keep track of … Continue reading →