Saturday, November 24, 2012

Installing SSHblock

My adventure with my new server continues. This morning, i tried to set up SSHblock which can be used to block users who are abusing the SSH protocol and tried to brute force and gained access to the server.

It's really simple to configure SSHblock since the installation script has done it for you and all you have to do is read the instructions and or warning that came out and fix that and re-run the script again. Even though the script couldn't find the path used in Slackware, but it seems that it will finally place the rc scripts to /etc/rc.d/, which is the correct place in Slackware. That's awesome.

Since it's a PERL scripts, it requires other CPAN module. SSHblock only requires SWATCH to be installed, but SWATCH itself requires 4 modules to be installed:
  • Date::Calc
  • Date::Parse
  • Date::Manip
  • File::Tail
Don't forget to install iptables as well since it will be used to block the IP addresses who tried to enter our server.