Re: fail2ban increase loadaverage to 18

[Seth Mattinen <sethm@rollernet.us>]

On 8/19/12 11:40 AM, Michelle Konzack wrote:
> Hello Max,
> 
> Am 2012-08-19 01:06:15, hacktest Du folgendes herunter:
>> It is necessary to limit the number of connections to
>> sshwithiptables, for example:
>> /sbin/iptables -p tcp -syn -dport 22-m connlimit -connlimit-above 3 -j DROP
> 
> Oops... I have locked me out!
> 
> I am right, this DROP from any IP addresses connections,  if  there  are
> more then 3 at the same time?
> 
> My automated scripts and several 100 embedded security  systems  hit  the
> limits.
> 
> Question:   Is there a possibility to set a TIME LIMIT
>             together with the above iptables line?
> 


Exclude your own networks and trusted sources.

~Seth