diff syslog2iptables.conf @ 9:d76f9ff42487

initial coding
author carl
date Sat, 03 Dec 2005 13:54:47 -0800
parents 276c4edc8521
children 0d65c3de34fd
line wrap: on
line diff
--- a/syslog2iptables.conf	Fri Dec 02 20:55:32 2005 -0800
+++ b/syslog2iptables.conf	Sat Dec 03 13:54:47 2005 -0800
@@ -1,4 +1,4 @@
-threshold 600;
+threshold 550;
 
 ignore {
     127.0.0.0/8;        // localhost
@@ -17,21 +17,21 @@
 file "/var/log/secure" {
     pattern "sshd.*Failed password .* from ::ffff:(.*) port" {
         index 1;    // zero based
-        bucket 300;
+        bucket 400;
     };
     pattern "sshd.*Failed password .* from (.*) port" {
         index 1;    // zero based
-        bucket 300;
+        bucket 400;
     };
 };
 
-file "/var/log/messages" {
-    pattern "sshd.pam_unix.*authentication failure.*rhost=(.*) user=" {
-        index 1;    // zero based
-        bucket 300;
-    };
-    pattern "sshd.pam_unix.*authentication failure.*rhost=(.*)$" {
-        index 1;    // zero based
-        bucket 300;
-    };
-};
+//  file "/var/log/messages" {
+//      pattern "sshd.pam_unix.*authentication failure.*rhost=(.*) user=" {
+//          index 1;    // zero based
+//          bucket 300;
+//      };
+//      pattern "sshd.pam_unix.*authentication failure.*rhost=(.*)$" {
+//          index 1;    // zero based
+//          bucket 300;
+//      };
+//  };