Re: [tlug] Script Kiddy Defence Script

[Botond Botyanszki <tlug@example.com>]

On Thu, 9 Jun 2005 18:39:00 +0900
Shawn <bofh@example.com> wrote:

> On FreeBSD, you get a nightly security report mailed to you, which
> reports failed login attempts. My cronned perl script scans those
> emails and adds the relevant IPs to the firewall

by the time you add the deny rule to the firewall, your sandra user
might be already running a zombie program communicating with a different
host that you block...