1
0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-25 09:34:11 +00:00
freebsd-ports/security/denyhosts/pkg-descr
Sunpoet Po-Chuan Hsieh 2b30969faf Update to 3.1
- Change MASTER_SITES from SF to GitHub
- Add LICENSE_FILE
- Relax USES=python
- Update CPE
- Update WWW

Changes:	https://github.com/denyhosts/denyhosts/releases
PR:		200837 (based on)
Submitted by:	Jesse Smith <jsmith@resonatingmedia.com>
2019-10-01 19:16:59 +00:00

22 lines
1.1 KiB
Plaintext

DenyHosts is a utility developed by Phil Schwartz and maintained by a number of
developers which aims to thwart sshd (ssh server) brute force attacks.
If you've ever looked at your ssh log (/var/log/auth.log ) you may be alarmed
to see how many hackers attempted to gain access to your server.
Denyhosts helps you:
- Parses /var/log/auth.log to find all login attempts
- Can be run from the command line, cron or as a daemon (new in 0.9)
- Records all failed login attempts for the user and offending host
- For each host that exceeds a threshold count, records the evil host
- Keeps track of each non-existent user (eg. sdada) when a login attempt failed.
- Keeps track of each existing user (eg. root) when a login attempt failed.
- Keeps track of each offending host (hosts can be purged )
- Keeps track of suspicious logins
- Keeps track of the file offset, so that you can reparse the same file
- When the log file is rotated, the script will detect it
- Appends /etc/hosts.allow
- Optionally sends an email of newly banned hosts and suspicious logins.
- Resolves IP addresses to hostnames, if you want
WWW: https://github.com/denyhosts/denyhosts