Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

removing a Linux Keylogger



dsr at tao.merseine.nu wrote:

>On Mon, Jul 25, 2005 at 01:00:50PM -0400, Grant M. wrote:
>  
>
> [snip]
>
>Second, you want to run a firewall on the machine that rejects
>excessive connection attempts. This iptables fragment:
>
>iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent \
>--set
>iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent \
>--update --seconds 60 --hitcount 4 -j DROP
>
>will generally prevent scriptkiddies from brute-forcing your SSH
>accounts, by limiting connection attempts to 3 per minute per IP
>address.
>
>  
>
I'm getting errors on these commands: "Unknown arg --set"

I have iptables v 1.2.6a running on Debian with the 2.4.18 kernel.

What version of iptables do I need?

TIA.

Bill





BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org