[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A little too secure.



> I've got an idea that's a slight twist on Jason's cron job.  When tcp
> wrappers prevents a connection, you get a message like:
> Feb 19 18:06:13 vodka sshd[15012]: refused connect from 18.244.0.114
> So, we have a cron job that does a:
> grep sshd /var/log/messsages | \
> 	grep "refused connect from" | grep 206.86.88.15
> which is my IP.  (we'd also search for a few other known good IP's).  If

Sounds excellent to me.  Also put pluto's IP in there - 205.166.61.57

How often do you think the cron job should run?  I was thinking ever half
hour or every hour.  Thoughts?

> Unless someone says nay, I'll write a script and test it on my local box
> and install it on Vodka when it's ready.  Should be simple enough.

Go for it!

Jason