removing a Linux Keylogger
Bill Horne
bill at horne.net
Wed Jul 27 09:52:33 EDT 2005
dsr at tao.merseine.nu wrote:
>On Mon, Jul 25, 2005 at 01:00:50PM -0400, Grant M. wrote:
>
>
> [snip]
>
>Second, you want to run a firewall on the machine that rejects
>excessive connection attempts. This iptables fragment:
>
>iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent \
>--set
>iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent \
>--update --seconds 60 --hitcount 4 -j DROP
>
>will generally prevent scriptkiddies from brute-forcing your SSH
>accounts, by limiting connection attempts to 3 per minute per IP
>address.
>
>
>
I'm getting errors on these commands: "Unknown arg --set"
I have iptables v 1.2.6a running on Debian with the 2.4.18 kernel.
What version of iptables do I need?
TIA.
Bill
More information about the Discuss
mailing list