search for: hit_count

Hello: I have been looking into projects that will automatically restrict hacking attempts on my servers running CentOS 5. I think the two top contenders are: DenyHosts - http://denyhosts.sourceforge.net Fail2ban - http://www.fail2ban.org >From what I see, DenyHosts only blocks based on failed SSH attempts whereas Fail2ban blocks failed attempts for other access as well. The main benefit

...-p tcp -m tcp --dport 80 -m recent --rcheck --seconds 7200 -- hitcount 4 --name httpdauth -j DROP #iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination DROP tcp -- anywhere anywhere tcp dpt:http recent: CHECK seconds: 7200 hit_count: 4 name: httpdauth side: source #iptables-save -A INPUT -p tcp -m tcp --dport 80 -m recent recent: --seconds 1701970164 -- hitcount 1953391971 --name --rsource -j DROP My patch against this bug: https://bugzilla.netfilter.org/cgi- bin/bugzilla/showattachment.cgi?attach_id=25 ------- You are r...

Hi strange behaviour of iptables on a centos 7.0 machine: The following rule is in the iptables of said machine: [root at myserver ~]# iptables -L -v -n --line-numbers |grep 175\. 9 9 456 DROP all -- * * 175.44.0.0/16 0.0.0.0/0 [root at myserver ~]# The corresponding enty in /etc/sysconfig/iptables looks like: [root at myserver ~]# grep 175 /etc/sysconfig/iptables

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=562 ------- Additional Comments From kaber@trash.net 2007-04-27 02:41 MET ------- I asked you to post this with additional information to the mailinglists, so pleast at least include the information here or post it to the lists as I asked. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email -------