Íàñòðîéêà brute force protection íà ðîóòåðå

[black_128]

Äîáðîãî âðåìåíè ñóòîê!
Ñêàæèòå, ðåøåíà ëè ïðîáëåìà ñ õàëÿâíûì õîæäåíèåì â èíòåðíåò, êîãäà Âàø IP èñïîëüçóþò âìåñòî øëþçà?

Îïèñàíî: http://www.wl500g.info/showthread.php?t=6595

Òàêæå, êàêèì îáðàçîì èçìåíèòü ìîé post-firewall, ÷òîáû âî ïåðâûõ ïåðåíàïðàâèòü äîñòóï ê 22ìó ïîðòó íà äðóãîé "áåçîïàñíûé", à âî âòîðûõ ñäåëàòü áëîêèðîâàíèå IP àòàêóþùåãî íà ñóòêè, ïîñëå íåóäà÷íûõ 6-òè êîííåêòîâ? Íåáîëüøîå çàìå÷àíèå - ÿ íå èñïîëüçóþ äîñòóï ê äîìàøíèì êîìïüþòåðàì èç WAN - íåò íåîáõîäèìîñòè.

À òî, ñö@$è ïûòàþòñÿ ëîìàòü:




inetnum: 85.89.73.218 - 85.89.73.222
netname: SE-NTI-SKOLAN-NETIT
person: Thomas Rojsel
address: Garvaregatan 4
phone: +46 23 702 22 02
nic-hdl: TR1185-RIPE
source: RIPE # Filtered
person: Lars Olsson
address: NetIT
address: Sweden
phone: +46 23 636 40
e-mail: lars@netit.se

Âîò ìîé post-firewall:

#!/bin/sh
#WEB,SSH and FTP access from WAN
iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -j DROP
#Test for post-firewall.log
echo "post-firewall running...">/var/log/post-firewall.log

Ïîäñêàæèòå, ãóðó!