Files
landry bbfbb1967b Import sysutils/reaction 1.4.1.
A daemon that scans program outputs for repeated patterns, and takes
action. A common usage is to scan ssh and webserver logs, and to ban
hosts that cause multiple authentication errors.

a sample config is provided to ban ssh bots via a pf table.

ok tb@
2024-09-11 11:30:36 +00:00

7 lines
178 B
Plaintext

To block the bots connecting on ssh by default, add the following line early in
${SYSCONFDIR}/pf.conf:
table <blocked_ssh> persist
block return in quick log from <blocked_ssh>