Displaying 1 result from an estimated 1 matches for "whitelist_ip".
2008 Jun 12
2
Request for added functionality - tracking and blocking attacks
...t loads a list of black listed account names.
In the sshd_config file one or more lines like this would be placed:
BLACKLIST_USER mysql
BLACKLIST_ISER root
BLACKLIST_USER cups
etc.
2. sshd also loads a small number of whitelisted IP addresses, which
are allowed to use the BLACKLIST user names:
WHITELIST_IP abc.def.ghi.jkl
WHITELIST_IP bca.fed.hig.klj/24
etc.
3. If a login attempt is made on a blacklisted account, but not from
a whitelisted IP address, it would result in a
sshd BLACKLISTED abc.def.ghi.jkl for account_name
message to syslog.
4. Additionally, an entry would be placed in an sshd...