FreeBSD: Block Brute-force Attacks Using Sshguard and IPFW Firewall

Thu, 30 Jul 2015 19:56:00 +0430

There is an old saying that the only safe computer is one that’s disconnected from the network, turned off, and locked in an underground bunker—and even then you can’t be sure!

Since most of us can’t afford to keep our servers in an underground bunker, the least little thing that could have been done in order to keep their threat exposure at rock-bottom is protecting them by running a combination of a firewall and an intrusion prevention system or IPS (a.k.a intrusion detection and prevention systems or IDPS). Surely, that alone proved insufficient and other security measures and best practices should also be considered.

This blog post covers setting up a basic secure and stateful IPFW firewall on FreeBSD along with Sshguard by iXsystems Inc as intrusion prevention system.

PF on Mamadou Babaei

FreeBSD: Block Brute-force Attacks Using Sshguard and IPFW Firewall