Re: denyhosts-like app for MySQLd?

Hi,

There is a functionality in pf, that allows you to have an application to=20
update a list of hosts, that is used in a rule. You could have a script=20
harvest the addresses from your log files, and then update the table in pf.=
 I=20
have not tried it myself, but was looking at adopting an implementation to=
=20
create a tarpit for spammers based on this idea.

On Monday 21 January 2008 11:50:11 am Jordi Espasa Clofent wrote:
> Hi all,
>
> =BFIs there any app like denyhosts[1] but intended for MySQLd service?
>
> We have a mysql ports (3306) opened for remote connections, and
> obviously the /var/db/mysql/machine_name.log is full of these kind of
> entries:
>
> ...........
> 936012 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> 936013 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> 936014 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> 936016 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> 936018 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> 936019 Connect     Access denied for user 'user'@'85.19.95.10' (using
> password: YES)
> .............
>
> The idea is blocking the abusive IPs in automated way.
>
> [1] http://denyhosts.sourceforge.net/

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"