John's questions

I've edited my /etc/pam.d/sshd for Radius authentication; I added this line:

auth required pam_radius_auth.so

Also, I've commented out the line:

@include common-auth

Now SSH authentication using Radius is OK if the Radius server is UP but if the radius server is down, there's no fallback to use the local linux accounts.

Any suggestions on where to edit the file to allow me fallback to my local linux account when my Radius server fails?

Im looking at SSH bruteforce prevention with iptables recent module.

I would like to know how does the --hitcount collect the value that it will use? Is it bytes, packets, no. of conntracked items or something else?

thanks!

Jonathan

Lets say a user block at 192.168.1.0/24 wants to access facebook. I want the BIND Server to reply with a wrong IP address, lets say 172.32.1.1. But when users from the IP address block of 192.168.2.0/24 want to access facebook they will get the real IP address of facebook.

DNS used is BIND9.