Vance wrote:
It is likely that these firewall rules are added by the ConfigServer Firewall/Login Failure Daemon that masonm described. Somewhere in the logs for that application it should say why your IP was blocked. Often this is because of failed login attempts, or even the number of attempts (successful or not) in a given time period. It all depends on what triggers are set in the application.
Thanks, Vance. Very useful for me to know that even successful attempts can trigger a block.
If you, or someone, would kindly educate me a bit further, can the firewall be tuned to block only, say, ssh attempts while leaving httpd alone? Clearly I do not want to block an entire group users from getting to my website just because they are from the same IP as one user who is trying to log into my server.
FAQ
Search
Members
Register
Login [ Anonymous ]
