accept any root password

hello

due to the large number of bots trying to hack a server bruteforcing root password, i thought about something:
1) first try: if the password is correct, login... otherwise return "wrong password"
2) idem
3) accept any password... if it's correct, login normally, otherwise login to a "can't do anything" shell

if the script see it got to log (it hardly will verify if the shell can execute commands), it will probably stop bruteforcing

any ideas on how to implement that?

 

 

 

 

Top