Quote Originally Posted by Doug S View Post
Yes, as long as there is not 10 minutes between login attempts.
Hey I just tried this on my local Ubuntu Server to test it out. Before adding the rule I could SSH to my local machine. After adding the rule and then attempting to access it 3 times I got the Permission denied (publickey,password).


HOWEVER, I was able to try ssh again and was prompted for a password 3 more times before it failed again.

I thought this command would add the ip to the DROP/REJECT list after 3 failed attempts such that they could not try ssh again (or in this case try any access to the server).

Am I missing something? After 3 successive failed attempts I want to block the IP from accessing everything.