ssh brute force attacks 3210

Peter T. Breuer introducing just test tomorrow then your has to know you addresses your

OK. But that wasn't the question. If somebody wants to DOS me, there's all kinds of ways to do so, and I don't see why BLOCKING them creates MORE opportunity. What was originally said was:

"Blocking IPs because of failed logins is a nice way introducing DOS attacks against yourself. What if someone spoofs the IP?"

If somebody has deliberate intent to harm me, well, that's what they are going to do, isn't it? That's entirely a different condition and purpose from someone trying to break in.

And who says I log accesses from ip's I've blocked? As a matter of prtactice, if someone has reached that level of annoyance, I don't log it - just block it. As to entire subnet blogs, I dunno about your router, but I can do that with a single entry and a mask.. so why would I have a gigantic exclude file - buttuming I was going to do that at all?

Again, I'm probably misunderstanding something, so don't think that I'm standing toe to toe shouting in your face - it just still doesn't make sense to me as stated.

-- Tony Lawrence