ping-conditional SSH firewall
DEBIAN | ||
etc | ||
usr/sbin | ||
.gitignore | ||
LICENSE | ||
README.md |
sshutter
Apply firewall rules depending on ping results
Motivation
SSH is, by nature, a very powerful and mighty tool which can be found on almost any UNIX system - and some Windows hosts, too. However, incidents like the XZ backdoor have shown that SSH is not invulnerable, and a critical vulnerability would be as desastrous as EternalBlue on Windows hosts.
This situation asks for dynamic solutions. And sshutter is such a dynamic solution. It activates or deactivates firewall rules for dropping requests to SSH as long as a certain IP address or network is reachable.
Building/Packing
To create the Debian/Ubuntu package for sshutter, run dpkg-deb --root-owner-group --build . sshutter_v0.1_all.deb