SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG
DONATE




YUM REPOSITORY

 
 

sshdfilter rpm build for : Mandriva 2011. For other distributions click sshdfilter.

Name : sshdfilter
Version : 1.5.6 Vendor : Mandriva
Release : 1 Date : 2011-03-16 04:10:09
Group : Monitoring Source RPM : sshdfilter-1.5.6-1.src.rpm
Size : 0.08 MB
Packager : Stéphane Téletchéa < steletch_mandriva_org>
Summary : SSH brute force attack blocker
Description :
sshdfilter blocks the frequent brute force attacks on ssh daemons, it
does this by directly reading the sshd logging output and generating
iptables rules, the process can be quick enough to block an attack
before they get a chance to enter any password at all.

sshdfilter starts sshd itself, having started sshd with the -e and -D
options. This means it can see events as they happen. sshdfilter then
looks for lines of the form:

Did not receive identification string from x.x.x.x
Illegal user x from x.x.x.x
Failed password for illegal user x from x.x.x.x port x ssh2
Failed password for x from x.x.x.x port x ssh2

The former three instantly trigger sshdfilter into creating iptables
rules which block all ssh access from that IP. The latter failure is
given a few chances before it too is blocked. These are in fact example
rules, the exact wording varies between Linux distributions, so
sshdfilter exists as a base program and groups of patterns for each
distribution.

All new rules are inserted into a custom chain, and to prevent the chain
from becoming overloaded with old rules, rules over a week old are
deleted.

RPM found in directory: /mirror/carroll.cac.psu.edu/pub/linux/distributions/mandrakelinux/official/2011/i586/media/contrib/release

Content of RPM  Changelog  Provides Requires

Download
ftp.gwdg.de  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.gwdg.de  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.gwdg.de  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.gwdg.de  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
bo.mirror.garr.it  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
bo.mirror.garr.it  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.icm.edu.pl  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.icm.edu.pl  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
ftp.pbone.net  sshdfilter-1.5.6-1-mdv2011.0.noarch.rpm
     

Provides :
sshdfilter

Requires :
iptables
iptables
openssh-server
openssh-server
/bin/sh
/bin/sh
perl-base
perl(Fcntl)
perl(IO::Handle)
perl(POSIX)
perl(Socket)
perl(Sys::Syslog)
rpmlib(PayloadIsLzma) <= 4.4.6-1


Content of RPM :
/etc/sshdfilterrc
/etc/sysconfig/sshdfilter
/usr/sbin/sshdfilter
/usr/share/doc/sshdfilter
/usr/share/doc/sshdfilter/INSTALL
/usr/share/doc/sshdfilter/todo
/usr/share/man/man1/sshdfilter.1.xz
/usr/share/man/man5/sshdfilterrc.5.xz