Hey<div><br></div><div>Do you care about MS-SQL attacks? Seems like it's probably wasted effort.<div><br><div class="gmail_quote">On 20 February 2012 22:59, Daniel Axtens <span dir="ltr"><<a href="mailto:danielax@gmail.com">danielax@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Greetings!<br>
<br>
Perusal of the daily snort emails shows that much of the alerts are generated by a relatively small number of hosts, mostly trying to propagate some sort of MS-SQL worm.<br>
<br>
What are people's opinions on setting up fail2ban to drop traffic coming from hosts who send lots of known-bad traffic?<br>
<br>
The obvious downside is potential DOS on valid users. How big is this risk and do we care?<br>
<br>
Thanks in advance,<br>
-- d</blockquote></div><br></div></div>