Pages: [1]   Go Down
Author Topic: Protection From SSH Bruteforce Attacks  (Read 1785 times)
ScarEye
Newbie
*
Offline Offline

Posts: 13


View Profile
« on: April 25, 2007, 22:30:40 PM »

Hey guys,

I am trying to setup this protection by following the instructions below.

http://www.macsat.com/macsat/content/view/62/30/#sshbrute

However, once I set eveything up and I restart the firewall I get this message

iptables v1.3.3: Unknown arg '-j'


The last line is what it's complaing about.  Yes, i installed the iptables-mod-extra package and these to modules are
loaded

ipt_recent
ipt_LOG

And this is added to my firewall.user

iptables        -A input_rule      -i $WAN -p tcp --dport 22 -j ACCEPT

 iptables -t filter -A input_rule -i $WAN -p TCP --dport 22 -m recent --name SSH --rcheck --hitcount 3 --seconds 120 -j LOG --log-prefix "SSH_BRUTE "
 iptables -t filter -A input_rule -i $WAN -p TCP --dport 22 -m recent --name SSH --update --hitcount 3 --seconds 120 -j DROP
 iptables -t filter -A input_rule -i $WAN -p TCP --dport 22 -m recent --name SSH --set -j



Any ideas ?

Thanks
ScarEye



Logged

zsjoska
Newbie
*
Offline Offline

Posts: 29



View Profile
« Reply #1 on: April 26, 2007, 09:54:17 AM »

It may be only a posting typo... but the last command should not end with the "-j", it must be followed by an ACCEPT
Logged

------------------------------------------------------------
Using Asus WL-500g Deluxe with OpenWrt RC6 + WebIf2

Pages: [1]   Go Up
Print
 
Jump to:  

Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC | Theme Kani By Fussilet

Page created in 0.163 seconds with 20 queries.