Projects / pam_shield


pam_shield is a PAM module that uses null-routing or iptables to lock out script kiddies that probe your computer for open logins or easy guessable passwords. pam_shield is meant as an aid to protect public computers on the Internet.

Operating Systems

Recent releases

  •  12 Jan 2011 20:32

    Release Notes: shield_purge would delete entries that were still active, causing the delete-rule trigger to never be executed in some cases. This bug has been fixed.

    •  04 Sep 2010 11:50

      Release Notes: A number of bugs were fixed. The configuration parameters for allowing missing DNS entries and reverse DNS entries are now handled properly. When the trigger command fires, a check is now made whether the trigger executed successfully. Syslogging is now done with the AUTHPRIV facility. A possible NULL pointer reference bug was fixed. The trigger command now uses IP blackholing. A lot of explanatory text about configuring the PAM stack was added to the INSTALL file.

      •  01 Jul 2007 21:40

        Release Notes: It is now possible to whitelist hosts and networks.

        •  11 May 2007 12:36

          Release Notes: By default, pam_shield now uses null-routing rather iptables to block attackers.

          •  14 Jan 2007 02:26

            No changes have been submitted for this release.


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.