Репозиторий Sisyphus
Последнее обновление: 1 октября 2023 | Пакетов: 18631 | Посещений: 37047097
en ru br
Репозитории ALT
S:1.0.6-alt2
5.1: 1.0.5-alt3
4.0: 1.0.5-alt0.M40.1
www.altlinux.org/Changes

Группа :: Безопасность/Сети
Пакет: sshutout

 Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

Текущая версия: 1.0.5-alt0.M40.1
Время сборки: 6 июля 2008, 00:29 ( 820.8 недели назад )
Размер архива: 37.89 Kb

Домашняя страница:   http://www.techfinesse.com/sshutout/sshutout.ht…

Лицензия: GPL
О пакете: Stop SSH dictionary attacks
Описание:

sshutout periodically monitors log files looking for multiple failed login attempts
via the sshd (optionally, sshd2). It is meant to mitigate what is commonly
known as "dictionary attacks," i.e. scripted brute force attacks that use lists
of user IDs and passwords to effect unauthorized intrusions. Typically such
attacks fill up the system logs with hundreds or even thousands of log entries
for the failed login attempts. Aside from the nuisance of wasted space, wasted
bandwidth, and reduced signal to noise ratio in the logs, the attacks can pose
a real danger to systems with weak ID and password combinations.

This package blunts such attacks by creating firewall rules to block individual
offenders from accessing the system. These rules are created when an attack
signature is detected, and after a configurable expiry interval has elapsed,
the rules are deleted.

While sshutout can help reduce the severity and impact of dictionary attacks,
it is by no means a substitute for a good password policy. A password policy
is the front line of defense against intrusion and should be given careful
consideration. sshutout is merely one small tool intended to help reduce log
clutter and diminish the incentive to mount dictionary attacks.

Текущий майнтейнер: Michael Shigorin

Список всех майнтейнеров, принимавших участие
в данной и/или предыдущих сборках пакета:

Список rpm-пакетов, предоставляемый данным srpm-пакетом:

  • sshutout
ACL:
     
    дизайн и разработка: Vladimir Lettiev aka crux © 2004-2005, Andrew Avramenko aka liks © 2007-2008
    текущий майнтейнер: Michael Shigorin