@syncer @dmbaturin Please pull https://github.com/vyos/vyatta-cfg-system/pull/60 and https://github.com/vyos/vyos-build/pull/9

What to so with this task, requests were closed.

Closed b/c I wanted to rewrite it using vyos-1x command package.

straight firewalling won't help if the logon attempts still come from a presumably trusted LAN. I like the idea of at least a temporary lockout to prevent mass attempts when someone is running a big password list, though the utility of this naturally drops if VyOS can be fingerprinted before the attempt and the instance runs with a default password, but that's a sysadmin problem.

Any chance this will be revived for 1.3 or 2.0 ?
Any amount of firewalling is not gonna stop brute forcing.

If this will not be revived will there atleast be a feature with some parity to block after X amount of failed logins for Y amount of time that is increased by a factor of Z amount for each additional failed logins ?

@c-po Why stop the implementation of this function? My original idea was to implement the automatic configuration and operation of the service in vyos-1x. It seems that you already have an idea?

+1 for implementation

For "SSH" we have dynamic-protection

vyos@r14# set service ssh dynamic-protection  
Possible completions:
+  allow-from           Always allow inbound connections from these systems
   block-time           Block source IP in seconds. Subsequent blocks increase by a
                        factor of 1.5 (default: 120)
   detect-time          Remember source IP in seconds before reset their score (default:
                        1800)
   threshold            Block source IP when their cumulative attack score exceeds
                        threshold (default: 30)