[ale] 300,000 failed login attempts in 6 months!!!

[johnmills at speakeasy.net (John Mills)]

Greg -

First, maybe you should feel flattered (as well as flattened)!

When I raised a similar question here, several ALErs suggested 'fail2ban'. 
I have been very happy with it: easy setup and e-mailed messages.

Basically it watched logs and manipulates the firewall. It can 
automatically relax the lockouts, too.

  - Mills

On Mon, 18 Aug 2008, Greg Freemyer wrote:

> All,
>
> Is there a way to only allow one ksh attempt per IP per timeframe.
> And after X attempts to block it for an hour or so?