ssh prevent scanning

Hi
Someone is guesting the password for ssh. How can i board his IP if
he fail the password over a few times?
thanks
from Peter ((E-Mail Removed))

On Mon, 19 Feb 2007 06:10:37 -0800, cmk128 wrote:

> Hi
> Someone is guesting the password for ssh. How can i board his IP if
> he fail the password over a few times?
> thanks
> from Peter ((E-Mail Removed))


This what I use - no-one is allowed more than 3 login attempts within
any 25 second interval.

iptables -A INPUT -p tcp --dport 22 -i eth0 -m state --state NEW \
-m recent --set
iptables -A INPUT -p tcp --dport 22 -i eth0 -m state --state NEW \
-m recent --update --seconds 25 --hitcount 4 -j DROP