FTP Search

Directory

Content Search

sshdfilter

SSH brute force attack blocker

/Main/Mandrake/2007.0/noarch/Monitoring/

sshdfilter blocks the frequent brute force attacks on ssh daemons, it does this by directly reading the sshd logging output and generating iptables rules, the process can be quick enough to block an attack before they get a chance to enter any password at all.

sshdfilter starts sshd itself, having started sshd with the -e and -D options. This means it can see events as they happen. sshdfilter then looks for lines of the form:

Did not receive identification string from x.x.x.x Illegal user x from x.x.x.x Failed password for illegal user x from x.x.x.x port x ssh2 Failed password for x from x.x.x.x port x ssh2

The former three instantly trigger sshdfilter into creating iptables rules which block all ssh access from that IP. The latter failure is given a few chances before it too is blocked. These are in fact example rules, the exact wording varies between Linux distributions, so sshdfilter exists as a base program and groups of patterns for each distribution.

All new rules are inserted into a custom chain, and to prevent the chain from becoming overloaded with old rules, rules over a week old are deleted.

Info:

Homepage:	http://www.csc.liv.ac.uk/~greg/sshdfilter/
Package version:	1.4.4
Architecture:	noarch
Distribution:	Mandrake 2007.0
Filename:	sshdfilter-1.4.4-1mdv2007.0.noarch.rpm

Browse inside sshdfilter-1.4.4-1mdv2007.0.noarch.rpm:

Download sshdfilter-1.4.4-1mdv2007.0.noarch.rpm:

2005-09-20  ftp://ftp.ps.pl/dsk0/Mandrivalinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.ps.pl/dsk0/Mandrivalinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.free.fr/.mirrors7/ftp.mandriva.com/MandrivaLinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.free.fr/.mirrors7/ftp.mandriva.com/MandrivaLinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.lmd.ens.fr/pub/MandrivaLinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.lmd.ens.fr/pub/MandrivaLinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-11-15  ftp://ftp.tms.ru/pub/linux/mandriva/2007lce/i586/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://ftp.univ-lille1.fr/pub/os/linux/distributions/mandrakelinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://77.88.19.68/mandriva/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://77.88.19.68/mandriva/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://sunsite.mff.cuni.cz/MIRRORS/ftp.sunet.se/pub/Linux/distributions/mandrake/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2005-09-20  ftp://sunsite.mff.cuni.cz/MIRRORS/ftp.sunet.se/pub/Linux/distributions/mandrake/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.li.kernel.org/pub/.2/Mandrakelinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.li.kernel.org/pub/.2/Mandrakelinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.uni-kl.de/pub/linux/mandriva/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.uni-kl.de/pub/linux/mandriva/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://204.152.191.39/mandrake/Mandrakelinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://204.152.191.39/mandrake/Mandrakelinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.esat.net/mirrors/.4/carroll.cac.psu.edu/Mandrakelinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.esat.net/mirrors/.4/carroll.cac.psu.edu/Mandrakelinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2007-10-04  ftp://ftp.ac-toulouse.fr/Mandriva/Mandrivalinux/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://128.118.2.96/pub/.mirrors/1/rsync.mandriva.com/ftp/MandrivaLinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://128.118.2.96/pub/.mirrors/1/rsync.mandriva.com/ftp/MandrivaLinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.tu-chemnitz.de/.SAN0/pub/linux/mandrakelinux/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.tu-chemnitz.de/.SAN0/pub/linux/mandrakelinux/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/x86_64/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/sparc64/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/sparc64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/sparc/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/sparc/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/ppc/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/ppc/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/i586/media/contrib/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/cooker/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/2007.1/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-09  ftp://ftp.math.utah.edu/pub/mirrors/sunsite.uio.no/linux/mdl/devel/2007.1/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.informatik.rwth-aachen.de/pub/comp/Linux/mandrake/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.informatik.rwth-aachen.de/pub/comp/Linux/mandrake/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-10  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/devel/cooker/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-10  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/devel/cooker/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-10  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/devel/2007.1/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-07-10  ftp://ftp.nsysu.edu.tw/Linux/Mandrake/devel/2007.1/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.filearena.net/mnt5/mandriva/official/2007.0/x86_64/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.filearena.net/mnt5/mandriva/official/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm
2006-09-19  ftp://ftp.univie.ac.at/systems/linux/Mandrake/2007.0/i586/media/contrib/release/sshdfilter-1.4.4-1mdv2007.0.noarch.rpm