preventing brute force attacks with iptables?

[mischaq]

Might this be an idea to realize for syno-DS?

Blocks hosts trying to connect more than 3 times to the synology SSH server within 60 seconds?

I got inspirded by Sébastien Wains idea: here (including CODE) - but can this be done on a Diskstation and if yes, are there any adaptions necessary to the CODE?

I find this a geat thing if this could be done!

cheers, mischaq

[mischaq]

Sébastien has answered in shis blog...

"well simply pass the commands beginning by iptables :
iptables -A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT
…

and see if it accepts the module “recent”.

If it does you just need to create a script and call it at boot"

...great, but i'm far to much a linux-newbie to make head or tail of these explanations. can someone help out in creating this superbe security feature?

cheers, mischaq

[Toxic]

afaik synology does not support iptables. iptables are for network devices that support NAT.

[mischaq]

bad luck - but thanks a lot for the info!

cheers, mischaq