[geeks] ssh attacks

[Kurt Huhn]

On Aug 11, 2004, at 1:30 PM, Mike Hebel wrote:

>
> I'm an idiot here but I can't think of how to do this using IPF on the
> firewall box remotely.  If I try and it fuck it up I'm locked out.
>
> Would this work:
>
>
> block in quick on le0 proto tcp from $outside_IP to $firewall_IP port 
> = 22
>

I can't verify the syntax ATM, but yeah, that should block the $bad_guy.

--
Kurt Huhn
kurt at k-huhn.com