Red Hat Security - auto block IPs trying to log in as "annonymous"

Author

auto block IPs trying to log in as "annonymous"

2004-01-26, 8:35 am

Is there a way to automatically block any IP trying to log in as annonymous?
I currently get a log report ea morning that identifies someone trying to
FTP in as annonymous (amongst other flags/warnings). I SSH in to the server
and do a "route add 123.123.123.123 lo" to lock out that IP. Unfortunately,
this is a day late - not to mention a manual process. Is anyone familiar
with a script that would allow this command to execute automatically?

BTW, my server is running RedHat 7.3, with PortSentry running as well.

Thanx,
Wm