IPShutter listens for connections on one port, and upon proper authentication temporarily unlocks a second port. The unlocking is brief (by default two minutes) and only applies to the IP address from which the authentication occurred. It is useful for restricting access to sshd. It uses and generates one-time passwords for authentication, which is accomplished with a Web browser. Abusive or password-guessing IP addresses are subject to two levels of banning.
