sshguard

protect against brute force attacks on sshd and others

WWW CVSWeb GITHub
  1. Package version
    sshguard-2.4.3
  2. Maintainer
    Stuart Henderson

sshguard protects hosts from brute force attacks. It supports IPv6,
whitelists and log authentication, interfaces with all the major
firewalling systems, has a remarkably clever log analyzer, and is
independent, fast and lightweight as it's written in C.

Parsers cover OpenSSH, several MTAs, IMAP/POP3 and ftp daemons.

+-----------------------------------------------------------------------
| Running ${PKGSTEM} on OpenBSD
+-----------------------------------------------------------------------

To use ${PKGSTEM} with pf(4), add something similar to the following to
${SYSCONFDIR}/pf.conf:

table <sshguard> persist

block in quick on egress proto tcp from <sshguard> \
to any port ssh label "ssh bruteforce"

  • devel/dwz