pam_shield is a PAM module that uses null-routing or iptables to lock out script kiddies that probe your computer for open logins or easy guessable passwords. pam_shield is meant as an aid to protect public computers on the Internet.
| Tags | Networking Firewalls Internet Security |
|---|---|
| Licenses | GPL |
| Operating Systems | POSIX Linux |
| Implementation | C |
Recent releases


Release Notes: shield_purge would delete entries that were still active, causing the delete-rule trigger to never be executed in some cases. This bug has been fixed.


Release Notes: A number of bugs were fixed. The configuration parameters for allowing missing DNS entries and reverse DNS entries are now handled properly. When the trigger command fires, a check is now made whether the trigger executed successfully. Syslogging is now done with the AUTHPRIV facility. A possible NULL pointer reference bug was fixed. The trigger command now uses IP blackholing. A lot of explanatory text about configuring the PAM stack was added to the INSTALL file.


Release Notes: It is now possible to whitelist hosts and networks.


Release Notes: By default, pam_shield now uses null-routing rather iptables to block attackers.


No changes have been submitted for this release.