BFD

[ylon]

Is there a Brute Force Detection function built in or one that can be added to Mac OS X so as to detect attackers and block their ips?

A really nice one that I’ve heard of for Linux is:
http://www.rfxnetworks.com/bfd.php

which works with their APF. I’m very hopeful that there is a similar alternative for Mac OS X.

[andrina]

Have a look at Bastille (http://www.bastille-linux.org/) and snort (http://www.snort.org/) – in fact there’s even a nice step-by-step for snort on OS X here – http://homepage.mac.com/duling/halfdozen/Snort-Howto.html

[ylon]

Thanks for those links. Looks like good information! However neither of those options appear to adaptively add ip addresses to a deny list… Am I missing a detail somewhere while reading over those sites or is there yet another option out there?

[andrina]

You may also find something of interest here – http://www.apple.com/itpro/articles/intrusionprotection/index.html

[Author]

Posts