On 11/19/2014 11:04 AM, Patrick O'Callaghan wrote:
On Wed, 2014-11-19 at 06:38 -0600, Bruno Wolff III wrote:
> On Wed, Nov 19, 2014 at 11:58:11 +0000,
> Patrick O'Callaghan <pocallaghan(a)gmail.com> wrote:
>>
>> If the main concern is ssh hacking, you might consider denyhosts (yum
>> install denyhosts). It's easy to set up and seems to be effective. The
>> logs make fascinating (and scary) reading.
>
> openssh stopped supporting tcpwrappers/libwrap in version 6.7 (which
> isn't in Fedora yet), so this will stop working in the not too distant
> future unless the Fedora maintainer puts that feature back in.
Well that's just great. Thanks for the heads up. I guess I'll have to
get into fail2ban after all (I had opted for denyhosts because at the
time it seemed easier).
poc
Look at OSSEC, too.
--
-- Steve