sshguard-users

[Sshguard-users] blocking ports different from 22

[michele <mi...@ma...>]

On a FreeBSD machine, I've an ssh daemon listening on a port different
from the default 22.
After some failures, the following IPFILTER rule is added to my
ipf.rules:

block in quick proto tcp from x.x.x.x to any port = 22

How can I tell to sshguard (1.3) to block my ssh port and not the
default 22?

Thanks

Re: [Sshguard-users] blocking ports different from 22

[michele <mi...@ma...>]

On 21-04-2009 15:04, michele wrote:

> How can I tell to sshguard (1.3) to block my ssh port and not the
> default 22?

Responding to myself...

In fwalls/command_ipfilter.h there's the
#define COMMAND_BLOCK
which defines the IPFILTER rule to be added and the port 22 is hard coded.

I think it should be interesting to have a command line option to pass 
to sshguard the ssh listening port, even if using a different port 
drastically decreases the number of scans by attackers.

If you think this feature can be interesting, I can provide a patch.

Bye