Comment Re:Something a little more advanced? (Score 1) 497
SSHGuard is designed to support this. Since the blocking backends are modular, you can make it block with firewalls other than those shipping with the code. Local or remote does not matter as long as you can reach/control it from the attacked host.
You have two options:
- you write your own module. Command-based modules are just 6 command definitions, see eg http://sshguard.svn.sourceforge.net/viewvc/sshguard/trunk/src/fwalls/command_pf.h?revision=181&view=markup
- you submit an extension request. If the team considers the firewall is relevant enough (Cisco ASA surely is), they're happy to add it. See the Request New link in the home page.