On 4/10/06, John Hinton <webmaster@ew3d.com> wrote:

Seems the script kiddies are now hitting vsftp with dictionary attacks.
I had three boxes showing around 12000 attempts from one IP yesterday.

My thoughts are that there should be an upstream solution for this which
is then supported by the upstream vendor. Yes, I know there are several
'other' solutions, but I'd really like to stay mainstream and use a
supported method for dealing with these issues. I can't help but view
them as security issues.

hey,

You can set max_clients and max_per_ip

that means only these no.of clients(max_clients) can connect at a time and only these no. of sessions per ipaddress(max_per_ip).

This may help in reducing the no.of attacks.

Regards

Ankush Grover