Re: Maybe it's time to get rid of tcpwrappers/tcpd?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 20 Mar 2014 20:05:21 +0100
Lennart Poettering <mzerqung@xxxxxxxxxxx> wrote:

> Well, all mails servers as well as sshd have much better ways to do
> such filtering. sshd has "Match",

The sshd's Match does not have any historic criteria (e.g. sshd does
not keep a database of previous login attempts). It is not possible
to import an address match from elsewhere either (where e.g. denyhosts
could write it). In short, Match cannot replay fail2ban and denyhosts,
as far as I can see.

I think your original idea of using firewalls was better. Someone just
has to implement it. Unfortunately, I'm neck-deep in cloud storage
at the moment, so I'm not volunteering.

-- Pete
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux