Thursday, November 3, 2011
11:13 PM

Protects Networked Hosts from Brute Force Attacks - Sshguar

Sshguard is a small program that monitors services running on your machine from the log files. When it detects that someone is doing something bad to a service, sshguard blocks the IP address of the bad guy with a firewall rule.

Sshguard Log support:
Sshguard interprets log messages with several formats:
 * syslog
 * syslog-ng
 * metalog
 * multilog
 * raw log
It can monitor multiple log files at once, and handles log rotation and temporary log files automatically. Its powerful grammar-based parser makes it straightforward to support several formats and services without increasing complexity.
Continue Reading...

0 comments:

Post a Comment