macOS
brew install sshguardlocal Homebrew formula metadata
sudo port install sshguardMacPorts ports tree · net/sshguard/Portfile · 来源: api.github.com
安装
brew install sshguardlocal Homebrew formula metadata
sudo port install sshguardMacPorts ports tree · net/sshguard/Portfile · 来源: api.github.com
sudo apk add sshguardAlpine Linux edge package indexes · sshguard · 来源: dl-cdn.alpinelinux.org
sudo apt install sshguardDebian stable package indexes · sshguard · 来源: deb.debian.org
sudo dnf install sshguardFedora Rawhide package metadata · sshguard · 来源: dl.fedoraproject.org
nix profile install nixpkgs#sshguardnixpkgs package indexes · pkgs/by-name/ss/sshguard/package.nix · 来源: api.github.com
sudo pacman -S sshguardArch Linux sync databases · sshguard · 来源: geo.mirror.pkgbuild.com
sudo zypper install sshguardopenSUSE Tumbleweed package metadata · sshguard · 来源: download.opensuse.org
概览
Protect from brute force attacks against SSH
历史
SSHGuard is a small intrusion-prevention utility that watches system logs for brute-force attacks and blocks repeat offenders through a firewall backend. It became package-manager material because it gives Unix administrators a lightweight alternative to heavier log-monitoring stacks.
The official manual and README describe SSHGuard as a tool that aggregates logs and blocks attackers using backends such as pf, ipfw, firewalld, iptables, ipset, nftables, IPFILTER, and hosts.allow. The manual copyright dates begin in 2007, and the current manual version is 2.5.1.
SSHGuard's official site emphasizes portability and small size, describing it as small C and Bourne shell code with support for many log sources and firewall systems. The input package-manager facts show it available across Homebrew, Debian, Ubuntu, Fedora, Arch, Alpine, Nix, MacPorts, and openSUSE ecosystems.
Operators configure `sshguard.conf`, choose a backend, and feed SSHGuard logs through files, syslog-style services, systemd journal, or macOS log streaming. Attackers are blocked after their score exceeds a threshold and can be temporarily blocked, permanently blacklisted, or whitelisted through explicit addresses or a whitelist file.
Package nerds care because SSHGuard is pure Unix plumbing: logs in, firewall commands out, minimal daemon surface. It is a good example of security tooling whose packaging value lies in service files, default config paths, backend selection, and integration with each operating system's logging and firewall conventions.
安全态势
broad file, network, media, or database tool signal. formula declares a Homebrew service.
orange 风险 · 中 置信度 · infrastructure
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
%PREFIX%/etc/sshguard.conf可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
sshguard | cli | 全局可执行文件 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:sshguard |
|---|---|
| 版本 | 2.5.1 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/sshguard |
| 主页 | https://www.sshguard.net/ |
| 仓库 | https://bitbucket.org/sshguard/sshguard |
| 上游文档 | https://bitbucket.org/sshguard/sshguard/raw/master/README.rst |
| 许可证 | ISC |
| 源码归档 | https://downloads.sourceforge.net/project/sshguard/sshguard/2.5.1/sshguard-2.5.1.tar.gz |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | declared |
| 注意事项 | Add the following lines to /etc/pf.conf to block entries in the sshguard table (replace $ext_if with your WAN interface): table <sshguard> persist block in quick on $ext_if proto tcp from <sshguard> to any port 22 label "ssh bruteforce" Then run sudo pfctl -f /etc/pf.conf to reload the rules. |
注册表事实
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | sshguard |
| Version Scheme | 1 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
sshguard 2.4.3-1
Protects from brute force attacks against ssh
https://sshguard.sourceforge.net
sudo apt install sshguardsshguard
nix profile install nixpkgs#sshguardsshguard 2.4.2-1
Protects from brute force attacks against ssh
http://sshguard.sourceforge.net
sudo apt install sshguardsshguard 2.5.1-r0
Protects hosts from brute-force attacks against SSH and other services
sudo apk add sshguardsshguard-doc 2.5.1-r0
Protects hosts from brute-force attacks against SSH and other services (documentation)
sudo apk add sshguard-docsshguard-openrc 2.5.1-r0
Protects hosts from brute-force attacks against SSH and other services (OpenRC init scripts)
sudo apk add sshguard-openrcsshguard 2.5.1-3.fc44
Protects hosts from brute-force attacks against SSH and other services
sudo dnf install sshguardsshguard-firewalld 2.5.1-3.fc44
Configuration for firewalld backend of SSHGuard
sudo dnf install sshguard-firewalldsshguard-iptables 2.5.1-3.fc44
Configuration for iptables backend of SSHGuard
sudo dnf install sshguard-iptablessshguard-nftables 2.5.1-3.fc44
Configuration for nftables backend of SSHGuard
sudo dnf install sshguard-nftablessshguard 2.5.1-1
Brute force detector for SSH, Exim, VSFTPD and more. Blocks by ip with iptables
sudo pacman -S sshguardsshguard 2.4.3-2.3
SSH brute force attack protector
sudo zypper install sshguardsshguard
sudo port install sshguard来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.