The tag has no wiki summary.

learn more… | top users | synonyms

-4
votes
1answer
78 views

make fail2ban use public blacklists

I've been searching high and low for a way to connect fail2ban with blocklist.de (or any other public blacklists, for that matter, as long as fail2ban can report to it). Pretty much every result that ...
0
votes
0answers
14 views

`hosts-restricted` without `restricted-usernames`

I have a user that is getting blocked by denyhosts on a daily basis after some initial problems and confusion with keys, passwords, account names and such, even though I keep unblocking him. When I ...
2
votes
3answers
94 views

Solaris 11 sshd brute force protection. DenyHosts equivalent for Solaris 11

I'm getting regular attempts to brute force ssh on a x86 solaris 11.1 server. On linux I use DenyHosts to block connections after a number of incorrect login attempts. Is there a similar package for ...
2
votes
2answers
910 views

denyhosts ignoring /etc/hosts.allow

I'm running Ubuntu 13.10 (not LTS, I know...). I have denyhosts installed. I have /etc/hosts.deny and /etc/hosts.allow. I've added 2 IPs to hosts.allow (home + work). However, whenever I sign in from ...
0
votes
0answers
65 views

MySQL Service allow local connections through hosts.allow

I have my hosts.deny set up as ALL: ALL but when I do this I can't seem to allow MySQL in hosts.allow. I need it just on the local network. I've tried: mysql: LOCAL mysqld: LOCAL and as a last ...
0
votes
2answers
369 views

restrict ssh, sftp access on ubuntu 12.04 through iptables or /etc/hosts.allow

I´ve tried to get into restricting access to a ubuntu server but i´m still unsure which way to go. the situation: We want to restrict access for ssh, and sftp to 4 clients with no static ip on a ...
0
votes
2answers
253 views

Work-dir in Ubuntu

I'm trying to configure my denyhosts on my server and this is what I read on it's website ( http://denyhosts.sourceforge.net/faq.html#3_7 ) that I have to move to WORK-DIR. I don't know where WORK-DIR ...
0
votes
1answer
41 views

Regaining access to server after I banned myself with denyhosts

I have installed DenyHosts 2 days ago and I didn't added my IP to list of safe IPs. Today I connected my server but it struggled a bit and I had to terminate my application which I connect to server. ...
0
votes
1answer
428 views

hosts.deny line too long or too big file?

I have about 50k ip addresses denied in the hosts.deny file, generated by a script with 7 addresses per line max and get this error: warning: /etc/hosts.deny, line 4429: missing newline or line too ...
0
votes
1answer
72 views

How do I enable tcpwrapper (hosts.deny) filter in mysqld / mariadb

How do I enable tcpwrapper (hosts.deny) filter in mysqld / mariadb prefered solution without recompiling. Using Debian, MariaDB 5.5 64 bit - Or should I just use iptables? What's faster and what ...
2
votes
1answer
858 views

Why does my hosts.deny not work on OSX 10.8? [closed]

For testing it I added these four lines to my /etc/hosts.deny file: # /etc/hosts.deny ssh-agent:ALL sshd:ALL   I waited some time and then I tried to gain ssh access to the loop-back IP address. ...
1
vote
1answer
544 views

How should I manually add IP addresses to denyhosts?

I have a few IP addresses I want to add manually to denyhosts because they're huge sources of inbound spam. What's the best way to do this? Or should I not be messing with it? I want to manually ...
4
votes
1answer
1k views

Can I use DenyHosts for a SMTP service

I would like to block some hosts that are brute forcing my SMTP server. I'm currently using DenyHosts for SSHD and was wondering if I can add the SMTP service too. It could be possible based on this ...
4
votes
1answer
173 views

Looking to Block Large Number of IPs

We have a server that consistently gets pounded by people trying to break in. We have DenyHosts and Fail2Ban running on the server but it still gets a ton of traffic from people who are up to no good. ...
0
votes
1answer
211 views

Hosts.deny file not being updated by denyhost service

I have denyhosts running on my server to block IPs that repeated fail to login over ssh, for example brute force style attacks. I can see that entries in the auth.log file have not been updated in the ...
4
votes
1answer
199 views

Denyhosts: Should I ever clear the denied IP hosts file?

This may not be a performance issue, but I have something like 110,000 ips blocked in hosts.deny (2 years of denyhosting). Should I ever clear hosts.deny? Does anyone have any experience with what ...
0
votes
1answer
345 views

On Solaris, how to log IP when using winbind auth and invalid user?

This is on Solaris 10 sparc platform. I'm trying to make our denyhosts script block the dictionary ssh attacks. Unfortunately, the logging does not show an IP when the user name is invalid. We are ...
0
votes
2answers
324 views

SSH Authentication - Bruteforce attack prevention

I use certificate/key based ssh authentication with sshd running on non standard port. Do I still need to install denyhosts/fail2ban or log analysis based detection?. Do I get any advantage?
0
votes
3answers
190 views

suggest: software like denyhosts without python or ruby [closed]

Last years i use perfect software denyhosts for analyze logs and deny access if some ip address have 3 or more unsuccess logins. I like that, but problem is - too much CPU/memory consuption for my ...
4
votes
4answers
1k views

How to block all root login attempts using denyhosts and or fail2ban?

I currently block all ssh logins using root. But I wanted to go the extra mile and block the ip address of the client who tried to login as root. I currently have denyhosts and fail2ban setup and ...
2
votes
1answer
278 views

What is the difference between using ipfw and hosts.deny in terms of security?

I'm in the middle of securing an OSX server that is the target of hundreds of automated requests per second from Chinese, Russian and US servers (see: Recovering a server from being an open relay). ...
3
votes
3answers
529 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
1
vote
3answers
1k views

DenyHosts - Everytime I block myself

Since I installed DenyHosts I get the error "ssh_exchange_identification" if I want to login via ssh to my server. If I lookup /etc/hosts.deny I find my IP inside there. How could I prevent that my IP ...
0
votes
1answer
956 views

checking if deny host is running and tcpwrappers

On this link http://www.cyberciti.biz/faq/block-ssh-attacks-with-denyhosts/ if you search following grep 'from' /var/log/auth.log|cut -d ' ' –field=13 | uniq -c | sort -nr > ct-result.txt the ...
4
votes
2answers
4k views

How to delete ip address from denyhosts

I was experimenting with denyhosts from my home computer and now it has blocked my ip address and put in /etc/hosts.deny. Now my ip is not static and it chnages every week so i cna have fixed ip in ...
0
votes
1answer
674 views

hosts.deny not working

Currently I am watching the live auth.log and someone is continuously trying the brute force attack for 10 hours. Its my local server so no need to worry but I want to test. I have installed ...
0
votes
1answer
370 views

Linux / cPanel security - firewall or Denyhosts?

I have a VPS running cPanel that has a csf firewall configured. I've also got Host Access Control (does this mean denyhosts on cPanel?) as well as cPHulk which is a cPanel exclusive utility. My ...
4
votes
6answers
3k views

fail2ban and denyhosts constantly ban me on Ubuntu

I just got an Ubuntu instance on Linode. To secure the SSH on it, I installed fail2ban (using apt-get), but then had a problem: fail2ban kept banning my IP (for limited durations, thankfully) even ...
27
votes
7answers
22k views

Denyhosts vs fail2ban vs iptables- best way to prevent brute force logons?

I'm setting up a LAMP server and need to prevent SSH/FTP/etc. brute-force logon attempts from succeeding. I've seen many recommendations for both denyhosts and fail2ban, but few comparisons of the ...
1
vote
8answers
948 views

Weekly Cron / Logrotate / Denyhosts error

I am getting the following error email every week. It appears to be a problem with either cron, logrotate, or denyhosts. I'm not sure which. Subject: Cron <root@vps> test -x /usr/sbin/anacron ...
1
vote
4answers
967 views

How can I prevent denyhosts from adding the same host to the denied file over and over

I am using denyhosts on my FreeBSD (6.2) box, and everything appears to be working fine, except denyhosts keeps adding the same 4 hosts to my denied file over and over. eli18.internetdsl.tpnet.pl ...