jtniehof/pam_shield
View on GitHub ↗ ★ 60 C archived
[INACTIVE] A PAM module to automatically block IP addresses which try brute-force password guessing.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2014-11-20 · latest 2022-01-05
20082026
-
…files. And you can trigger whatever action you want. I believe the default is just null routing. https://github.com/jtniehof/pam_shield There are other, similar pam modules if this one isn't your cup of tea. There's pam_tally2, and others.
comment by tyingq · 2022-01-05 · in Best Practices for Securing SSH -
https://github.com/jtniehof/pam_shield Last commit June 2012? Does it work with modern distros?
comment by philg_jr · 2019-01-25 · in Practical Linux Hardening Guide -
I like pam_shield, personally. https://github.com/jtniehof/pam_shield Back in the day, disabling password auth but leaving keyboard_interactive on would stop a lot of these things, but I don't think that's true any more.
comment by ryan-c · 2014-11-20 · in Patch to Log SSH Passwords – One Year Results