webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-11 19:55:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

guardian: React on BF attacks for SSH at pre-auth stage.

Browse Source 
See #10457.
This commit is contained in:
Kim Wölfel
2014-01-10 16:19:43 +01:00
committed by Michael Tremer
parent 7514fe47f6
commit 2a747e37a8
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/guardian/guardian.pl
View File

@@ -106,6 +106,10 @@ for (;;) {
$temp = $array[11];
}
&checkssh ($temp, "possible SSH-Bruteforce Attack");}
# This should catch Bruteforce Attacks with enabled preauth
if ($_ =~ /.*sshd.*Received disconnect from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):.*\[preauth\]/) {
&checkssh ($1, "possible SSH-Bruteforce Attack, failed preauth");}
}
}
@@ -424,4 +428,4 @@ sub get_aliases {
}
print "done \n";
}
}

2
lfs/guardian
View File

@@ -30,7 +30,7 @@ THISAPP = guardian-$(VER)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = guardian
PAK_VER = 8
PAK_VER = 9
DEPS = ""