Home › Forums › BlockHosts

Using Blockhosts for GLFPTD and for Apache

Tue, 2006–Apr–18

Hi,

how would you go about setting up Blockhosts to block access to GLFPTD after 2 false logins.
And how would you go about setting it up to block hosts which request 3 wrong files in Apache?

Would appreciate any help on this.

Good work on Blockhosts, it's a very useful tool. Working perfectly for SSHD on Suse 10 OSS.

Regards.

[webadmin: edited title 2004-04-18]

‹ Using BlockHosts with wu-ftpd Intrusion source and location mashup ›
Tue, 2006-04-18 07:14 — Anonymous (not verified)

glftpd - send log lines; apache - no possible yet

For glftpd, as long as it puts out unique log lines to detect failures as well as IP addresses, and if glftpd supports TCP Wrappers (hosts.access), then it should be possible. Post the example log lines here, then the regex lines to be entered in blockhosts.cfg can be created.

As for Apache, it does not use hosts.access TCP wrappers, so in the current form, blockhosts cannot be used to block host access. Maybe in the future, blockhosts will support iptables filtering, which could block hosts at the TCP level, so will not need any hosts_access support.