SuSefirewall - protect sshd

Ludwig Nussel wrote:
Rodusek (AP-SGP) wrote:

>Ludwig Nussel wrote:
>
Rodusek (AP-SGP) wrote:


I'm a bit confused with Susefirewall. I have had a number of robot
attacks against sshd so I set the following rule in SuSefirewall to
limit the number of allowable sshd logins per 60 second period:

FW_SERVICES_ACCEPT_EXT="0/0,tcp,22,,hitcount=3,blockseconds=60,recentname=ss h"


Provided that your network interface is in the external zone this
should work fine.

cu
Ludwig


>Hi Ludwig,
>>
>Yes my interface is indeed in the external zone. From my log files (as
>per below) I can see that it does not however work
>. I'm not sure what to try next to make it work!! Rgds.
>
>
Check the output of
>
SuSEfirewall2 status
>
cu
Ludwig

Hi Ludwig,

I did as you requested and got LTS of output (i've attached it here in
gz format - hope I didn't break any netiquette) but I'm not sure what to
look for!!?? Sorry, I'm not to expert in iptables!! Thanks and rgds.