Changes between Version 5 and Version 6 of SshSecuring

Timestamp:

May 18, 2017 11:16:06 AM (5 years ago)

Author:

fernando

Comment:

--

SshSecuring

@@ -27 +27 @@
 
 https://we.riseup.net/stefani/iptables-recent-module-and-hit-limits
+http://thiemonagel.de/2006/02/preventing-brute-force-attacks-using-iptables-recent-matching/
+https://www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTO-3.html#ss3.16 Recent_patch 3.16
+http://hostechs.com/2008/09/dropping-a-ddos-attack-using-ttl-and-length-in-iptables/
+
+
+Rechaza aquellas ips que intantan 5 conexiones en las ultimos 60 s 
 
 {{{
 -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j SSHSCAN
 -A SSHSCAN -m recent --set --name SSH --rsource
--A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH --rsource -j LOG --log-prefix "Anti SSH-Bruteforce: " --$
--A SSHSCAN -m recent --update --seconds 3600 --hitcount 5 --name SSH --rsource -j DROP
+-A SSHSCAN -m recent --update --seconds 60 --hitcount 5 --name SSH --rsource -j LOG --log-prefix "Anti SSH-Bruteforce: " --$
+-A SSHSCAN -m recent --update --seconds 60 --hitcount 5 --name SSH --rsource -j DROP
 -A SSHSCAN -j ACCEPT
 
 }}}
 
-Para quitar una maquina:
+Para quitar una maquina los datos de conexiones recientes:
 
 echo "-193.144.202.192" > /proc/self/net/xt_recent/SSH