Josh

* In 1974 with 36.1% of oil from foreign sources, President Richard Nixon said, “At the end of this decade, in the year 1980, the United States will not be dependent on any other country for the energy we need.”

* In 1975 with 36.1% of oil from foreign sources, President Gerald Ford said, “We must reduce oil imports by one million barrels per day by the end of this year and by two million barrels per day by the end of 1977.”

* In 1979 with 40.5% of oil from foreign sources, President Jimmy Carter said, “Beginning this moment, this nation will never use more foreign oil than we did in 1977 – never.”

* In 1981 with 43.6% of oil from foreign sources, President Ronald Reagan said, “While conservation is worthy in itself, the best answer is to try to make us independent of outside sources to the greatest extent possible for our energy.”

* In 1992 with 47.2% of oil from foreign sources, President George Bush said, “When our administration developed our national energy strategy, three principles guided our policy: reducing our dependence on foreign oil…”

* In 1995 with 49.8% of oil from foreign sources, President Bill Clinton said, “The nation’s growing reliance on imports of oil…threatens the nation’s security…[we] will continue efforts to…enhance domestic energy production.”

* In 2006 with 65.5% of oil from foreign sources, President George W. Bush said, “Breakthroughs…will help us reach another great goal: to replace more than 75 percent of our oil imports from the Middle East by 2025.”

* In 2009 with 66.2% of oil from foreign sources, President Barack Obama said, “It will be the policy of my administration to reverse our dependence on foreign oil while building a new energy economy that will create millions of jobs.”

I was whitewater kayaking when I look over at a guy putting on a copious amount of sun screen. I asked him what he was doing and he replied “I.T. guys with a tan get no respect at work.” IMMD

Submitted by: judson

I use a variation on tarpitting that has worked very well for me. It cut the attempts down from 60,000/day to 20 or 30 per day.

I just add a small delay between the initial connection attempt and when I send the username/password prompt. The delay (in seconds) is the number of attempts in the last 30 minutes, squared. This makes all but the most determined attacker give up and go away very quickly.

I have been using this with both FTP and SSH for the last year, and it works great.

fail2ban firewalls off the port for a time you specify

DenyHosts blocks the ip in /etc/hosts.deny

I find fail2ban to be much more effective since I can use it for more than just SSH (on my system: ftp, imap, pop3, ssh, smtp). Some of the newer botnets will attempt to crack the password using another service and then try the resulting password on ssh so it's important to have more complete coverage.

iptables -N autoban
iptables -I INPUT -p TCP --dport 22 -j autoban
iptables -A autoban -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH
iptables -A autoban -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 --rttl --name SSH -j DROP

Any site that connects more than 4 times in 60 seconds gets all packets subsequently dropped.  You could change DROP to TARPIT (if your kernel supports it).