4 ms·
I would love to know how to configure this for ssh connection attempts
by hossbeast 9y ago
I would love to know how to configure this for ssh connection attempts
- yorwba 9y agoIf you are being adventurous, I guess you can just let them log in for a special user that has the shell set to a program that sends single characters very slowly. It is probably quite insecure, though.
- dredmorbius 9y agofail2ban, in a general sense.
- pmlnr 9y agoNo, this is a tarpit. Fail2ban simply rejects or drops vua iptables.
- dredmorbius 9y agohttps://gist.github.com/Belphemur/82d27b1b6dfd675d15f2 https://gist.github.com/Belphemur/82d27b1b6dfd675d15f2 Tarpit Action for Fail2ban with rate limit
- est 9y agoI have something similar on my VPS, edit /etc/issues.net to this Permission denied. Please try again.
- tyingq 9y agoSsh does support compression, but it seems to be only if the client requests it (ssh -C). You could, though, write a pam module to trickle data out very slowly. Maybe pam_python would be easier to experiment with. I use pam_shield to just null route ssh connections with X failed login attempts. There's no retaliation in that approach, but it does stop the brute forcing.