Skip to content

Instantly share code, notes, and snippets.

@ymek

ymek/iptables_ssh_brute_force_limiter

Created March 6, 2015 17:58
Show Gist options
  • Save ymek/82ba2b22a9ce7621bec8 to your computer and use it in GitHub Desktop.
Save ymek/82ba2b22a9ce7621bec8 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
iptables_ssh_brute_force_limiter
# Generated by iptables-save v1.4.21 on Fri Mar 6 01:19:41 2015
*filter
:INPUT ACCEPT [5321:859636]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [4300:2722225]
:LOGDROP - [0:0]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 --name DEFAULT --mask 255.255.255.255 --rsource -j LOGDROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name DEFAULT --mask 255.255.255.255 --rsource
-A LOGDROP -j LOG
-A LOGDROP -j DROP
COMMIT
# Completed on Fri Mar 6 01:19:41 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment