[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: A little too secure.
> I've got an idea that's a slight twist on Jason's cron job. When tcp
> wrappers prevents a connection, you get a message like:
> Feb 19 18:06:13 vodka sshd[15012]: refused connect from 18.244.0.114
> So, we have a cron job that does a:
> grep sshd /var/log/messsages | \
> grep "refused connect from" | grep 206.86.88.15
> which is my IP. (we'd also search for a few other known good IP's). If
Sounds excellent to me. Also put pluto's IP in there - 205.166.61.57
How often do you think the cron job should run? I was thinking ever half
hour or every hour. Thoughts?
> Unless someone says nay, I'll write a script and test it on my local box
> and install it on Vodka when it's ready. Should be simple enough.
Go for it!
Jason