User: mijio

Re:Something a little more advanced?

On: Coping With 1 Million SSH Authentication Failures?

SSHGuard is designed to support this. Since the blocking backends are modular, you can make it block with firewalls other than those shipping with the code. Local or remote does not matter as long as you can reach/control it from the attacked host. You have two options:

1. you write your own module. Command-based modules are just 6 command definitions, see eg http://sshguard.svn.sourceforge.net/viewvc/sshguard/trunk/src/fwalls/command_pf.h?revision=181&view=markup
2. you submit an extension request. If the team considers the firewall is relevant enough (Cisco ASA surely is), they're happy to add it. See the Request New link in the home page.

Re:step back

On: Italy's First Steps in Censoring the Internet

He has stepped back in front of journalists. Then he had reproposed the same rule with different formulation