Subj : Block admin and root access attempts
To : Digital Man
From : nightcrawler
Date : Tue Oct 28 2014 09:04 pm
Re: Block admin and root access attempts
By: Digital Man to nightcrawler on Mon Oct 27 2014 04:38 pm
DM> Re: Block admin and root access attempts
DM> By: nightcrawler to All on Sat Oct 25 2014 12:08 am
>> Hey guys.
>> Can someone tell me something I can add to my login script that will
>> automatically add Ip's to the IP.can file that try to log in as root
>> or admin. It is becoming a full time job adding all the hack attempt
>> IP's manually. There was some discussion on the Facebook group about
>> this, but wasn't given a definitive answer. Also, I figured it would
>> be more helpful to other Sysops if it was asked and answered on here.
DM> There's an auto-filtering capability built-into Synchronet. See
DM> "LoginAttemptFilterThreshold" at
http://wiki.synchro.net/config:sbbs.ini
DM> for details.
DM> digital man
Thanks.
I set the LoginAttemptFilterThreshold to 3, but doesn't seem to be having any
effect.I've noticed a dozen or more attempts from an IP and it isn't being
added to the ip.can. Do you have any idea what I am doing wrong?
This is what I have:
LoginAttemptDelay=5000
LoginAttemptThrottle=1000
LoginAttemptHackThreshold=3
LoginAttemptFilterThreshold=3
TempDirectory=
HostName=
Interface=0.0.0.0
LogLevel=Debugging
BindRetryCount=2
BindRetryDelay=15
Nightcrawler +o Dark Sanctuary
darksanctuary.darktech.org
---
� Synchronet � Dark Sanctuary darksanctuary.darktech.org