Comments on: Setting up iptables to throttle incoming ssh http://blog.poucet.org/2009/11/setting-up-iptables-to-throttle-incoming-ssh/ Blogging about technology, functional programming, linux and life in general. Fri, 15 Jan 2010 23:50:09 +0100 http://wordpress.org/?v=2.9 hourly 1 By: Phil http://blog.poucet.org/2009/11/setting-up-iptables-to-throttle-incoming-ssh/comment-page-1/#comment-481 Phil Fri, 15 Jan 2010 23:50:09 +0000 http://blog.poucet.org/?p=132#comment-481 Chris' approach (1) doesn't waste the SSH daemon's time (2) is more secure since it drops packets as soon as possible and (3) is more dynamic and self-sufficient than simple throwing people in hosts.deny (which can get long, must be parsed on every connection, etc.) Chris’ approach (1) doesn’t waste the SSH daemon’s time (2) is more secure since it drops packets as soon as possible and (3) is more dynamic and self-sufficient than simple throwing people in hosts.deny (which can get long, must be parsed on every connection, etc.)

]]> By: poucet http://blog.poucet.org/2009/11/setting-up-iptables-to-throttle-incoming-ssh/comment-page-1/#comment-324 poucet Sun, 22 Nov 2009 09:26:20 +0000 http://blog.poucet.org/?p=132#comment-324 Hello Nicolas, Yes I know about /etc/hosts.deny. Another option would've been to simply blackhole traffic from ip's using iptable. However, the reason I went with the above approach is that I did not want static permanent blocks, and I wanted to learn a bit more about iptables. Hello Nicolas,

Yes I know about /etc/hosts.deny. Another option would’ve been to simply blackhole traffic from ip’s using iptable. However, the reason I went with the above approach is that I did not want static permanent blocks, and I wanted to learn a bit more about iptables.

]]> By: Nicolas Pouillard http://blog.poucet.org/2009/11/setting-up-iptables-to-throttle-incoming-ssh/comment-page-1/#comment-323 Nicolas Pouillard Sun, 22 Nov 2009 09:10:54 +0000 http://blog.poucet.org/?p=132#comment-323 Hi, I use denyhosts which in turn uses /etc/hosts.deny. Did you know it? Hi,

I use denyhosts which in turn uses /etc/hosts.deny. Did you know it?

]]>