Bash Script - Defend against Brute Force Attack

[spbr]

Hi,

Is there a way to create a bash script, in which it will either

• block connection from the attacker, if so many ping requests have been received
• block everything, if so many requests have been received

Thank you

[vorticalbox]

why not just block all incoming ports except for local/trusted IP's?

[KuJoe]

Is iptables an option for you or do you need a bash script? 

iptables -A INPUT -p icmp -m limit --limit  1/s --limit-burst 1 -j ACCEPT

 

[spbr]

1 hour ago, KuJoe said:

Is iptables an option for you or do you need a bash script? 

iptables -A INPUT -p icmp -m limit --limit  1/s --limit-burst 1 -j ACCEPT

 

 

Hi KuJoe, could you briefly explain the the above does?

Thank you

 

1 hour ago, vorticalbox said:

why not just block all incoming ports except for local/trusted IP's?

Hi vorticalbox, for this task, I'm assuming that everything is trusted, so I wanting to protect the device from large setnumber of pings from a single source.

Thank you

[KuJoe]

22 hours ago, spbr said:

Hi KuJoe, could you briefly explain the the above does?

Thank you

Sorry, I was in the middle of typing something yesterday and got distracted. Basically the iptables rule I posted will allow one ICMP (ping) packet per second, after that it will go to the next rules (which should be a DROP statement).