[NTLUG:Discuss] Firewall blacklist monitor

[Jay Urish]

On 4/21/2010 8:13 AM, Greg Edwards wrote:
> I've been looking for a firewall blacklist monitoring and management 
> tool.  I'm looking for something that will monitor activity and 
> automatically add and remove addresses from a dynamic blacklist.  My 
> primary need is to stop ssh login attempts.
>
> I'm running shorewall.  I'm beginning to think I'll have to write my own.
>
> TIA,
I am running daemonshield. It does exactly what you want and is highly 
configurable.. I have it protecting ssh and ftp (the biggest attack 
targets on my system).