DenyHosts is a utility to help sys admins thwart ssh hackers
http://denyhosts.sourceforge.net
DenyHosts is a python program that automatically blocks ssh attacks by adding entries to
/etc/hosts.deny. DenyHosts will also inform Linux administrators about offending hosts, attacked
users and suspicious logins.
-
3
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout network:utilities/denyhosts && cd $_
- Create Badge
Refresh
Refresh
Source Files
Filename | Size | Changed |
---|---|---|
denyhosts-3.0.tar.gz | 0000056283 55 KB | |
denyhosts-dh_reenable | 0000002394 2.34 KB | |
denyhosts-rpmlintrc | 0000000046 46 Bytes | |
denyhosts.README | 0000000354 354 Bytes | |
denyhosts.changes | 0000003247 3.17 KB | |
denyhosts.init | 0000002811 2.75 KB | |
denyhosts.spec | 0000005235 5.11 KB | |
logrotate.denyhosts | 0000000239 239 Bytes |
Revision 12 (latest revision is 15)
Lars Vogdt (lrupp)
committed
(revision 12)
- update to 3.0 + Initial translation of code from Python 2 to Python 3. DenyHosts can now be run as either a Python 2 or a Python 3 program. The new code has been tested with Pyhton 2.7 and Python 3.4. If you require an older version of Python, please continue to use DenyHosts 2.10 and let us know of your requirements. + Added patch from Fedora to fix initial sync issue and insure info logging stream is active. (Provided by Jason Tibbitts.) + Added "import logging" to denyhosts.py to avoid errors when setting up logging. (See above change.) + Added option PF_TABLE_FILE to the configuration file. When this option is enabled it causes DenyHosts to write blocked IP addresses to a text file. The default location is /etc/blacklist. This text file should correspond to a PF firewall table. + At start-up, try to create the file specified by HOSTS_DENY. That way we avoid errors later if the file does not exists. Can be a problem on operating systems where /etc/hosts.deny does not exist in the default configuration. + Added regex pattern to detect invalid user accounts. This blocks connections from remote hosts who are attempting to login with accounts not found on the local system. While these connections to non-existent accounts are relatively harmless, they are usually used as part of a brute force attack and filtering them before they reach OpenSSH is a good idea. + Finally, Jan-Pascal has created a sync server for DenyHosts which will allow DenyHosts services to coordinate lists of banned IP addresses. The new sync server is open source (GPLv3) and can be set up on private servers, networks and VPS. We plan to set up our own sync server in the near future. When a sync server is created it will
Comments 1
@mrdocs This dependency makes it unable to install . python-ipaddr is a src.rpm so now attempting to install denyhosts results in error "nothing provides python-ipaddr"