[NTLUG:Discuss] Firewall blacklist monitor

[Stuart Johnston]

Greg Edwards wrote:
> I've been looking for a firewall blacklist monitoring and management 
> tool.  I'm looking for something that will monitor activity and 
> automatically add and remove addresses from a dynamic blacklist.  My 
> primary need is to stop ssh login attempts.
> 
> I'm running shorewall.  I'm beginning to think I'll have to write my own.

I don't have a personal recommendation but there seems to be plenty out 
there.  fail2ban and DenyHosts came up with a quick search.  Have ones 
you found/tried not worked out some how?