[WBEL-users] WBEL 3.0 iptables [SSH Dictionary attacks followup]

[Kay Diederichs]

Kyle wrote:

> Hi folks,
> 
> I read a thread from back in March, where a couple of you discussed 
> adding a couple of rules to iptables to rate-limit ssh connections via 
> the use of libipt_recent.so in the config.
> 
> Only prob is, libipt_recent.so is not in the basic intstall. I googled 
> and found that this was an RHEL bug which was fixed in a subsequent 
> update and could be rectified locally by simply installing and 
> recompiling the src rpm. I have since downloaded the update src rpm for 
> WBEL 3.0 from gatech.edu and recompiled iptables. Unfortunately 
> libipt_recent.so still doesn't show up. So I suspect, I need to 
> change/add something in the iptables.spec file from the src rpm. But I 
> don't know what.
> 
> Can anyone help in that regard please?
> 
> What do I have to do/add/manipulate in order to get libipt_recent.so 
> compiled for iptables?
> 

I downloaded it from 
http://ftp.pslib.cz/pub/users/Milan.Kerslager/RHEL-3/stable/