locks out remote attackers trying password guessing

 In certain situations it is not possible to use host based
 authentication and here pam-shield comes in use.
 .
 It locks out brute-force password crackers using null-route or iptables rules.