Perl-based syslog watcher that matches certain login failures (SSH, FTP, POP3) and can dynamically block and email an alert, helping to monitor and manage hosting facilities
Be the first to post a text review of Breakinguard server monitoring. Rate and review a project by clicking thumbs up or thumbs down in the right column.
05/05/2005 Initial release 18/06/2005 Fixed configure script bugs with IO::Socket Changed iptables insert code to add blocks before any other rules in INPUT chain 27/07/2005 Repackage for sourceforge release 28/07/2005 Merged changes by Daniel (daniel @ automagic-software.com http://www.automagic-software.com/) - Timer for removing blocked hosts and RedHat init script - note, the init script may not work with your distribution! Contribs welcome!! 11/08/2005 Modified main config to do syslogging (events logged at info level) Also checking that user is root before starting main program run Fixed configure script as it was incorrectly detecting users SysV init folders 16/08/2005 Fixed a bug in some pattern matches, when no IP was detected, the script still tried to carry on regardless. Added some more debug output to aid problem solving New support forums online: http://www.thebmwz3.co.uk/community/ 17/08/2005 Separated configuration from main script file (config is now /etc/breakinguard.conf) to allow for easier upgrades, configuration changes Tidied some core code up NOTE: breakinguard now has 2 processes when listing process list. One for blocking/monitoring log files, one for unblocking/timing. Added new SSH login failure condition to pattern matching 22/08/2005 Changed the stat/mtime call to be more compatible (some perl versions complained with the -> reference) Fixed the init scripts to allow for non sysvinit style systems 21/11/2005 Updated package environment, re-release via sourceforge 05/02/2006 Updated to handle IPV6 headers on IP addresses, thanks to Rick/Scott and Jonathan. 07/02/2006 Fixed bug in IPV6 header handling code from previous release, regex was incorrect 24/04/2007 Added ability to use CIDR format IPs in safe_ips array Modified installer to detect debian and use debian perl module packages instead of CPAN 02/07/2007 Fixed the configure debian detection that failed on non-debian hosts Also added several modules into the configure script 08/01/2008 Added back the 'Invalid user' string, that somehow got lost somewhere back in time As this is another common SSHD output
============================================================================ Changelog ============================================================================ 05/05/2005 Initial release 18/06/2005 Fixed configure script bugs with IO::Socket Changed iptables insert code to add blocks before any other rules in INPUT chain 27/07/2005 Repackage for sourceforge release 28/07/2005 Merged changes by Daniel (daniel @ automagic-software.com http://www.automagic-software.com/) - Timer for removing blocked hosts and RedHat init script - note, the init script may not work with your distribution! Contribs welcome!! 11/08/2005 Modified main config to do syslogging (events logged at info level) Also checking that user is root before starting main program run Fixed configure script as it was incorrectly detecting users SysV init folders 16/08/2005 Fixed a bug in some pattern matches, when no IP was detected, the script still tried to carry on regardless. Added some more debug output to aid problem solving New support forums online: http://www.thebmwz3.co.uk/community/ 17/08/2005 Separated configuration from main script file (config is now /etc/breakinguard.conf) to allow for easier upgrades, configuration changes Tidied some core code up NOTE: breakinguard now has 2 processes when listing process list. One for blocking/monitoring log files, one for unblocking/timing. Added new SSH login failure condition to pattern matching 22/08/2005 Changed the stat/mtime call to be more compatible (some perl versions complained with the -> reference) Fixed the init scripts to allow for non sysvinit style systems 21/11/2005 Updated package environment, re-release via sourceforge 05/02/2006 Updated to handle IPV6 headers on IP addresses, thanks to Rick/Scott and Jonathan. 07/02/2006 Fixed bug in IPV6 header handling code from previous release, regex was incorrect 24/04/2007 Added ability to use CIDR format IPs in safe_ips array Modified installer to detect debian and use debian perl module packages instead of CPAN 02/07/2007 Fixed the configure debian detection that failed on non-debian hosts Also added several modules into the configure script
05/05/2005 Initial release 18/06/2005 Fixed configure script bugs with IO::Socket Changed iptables insert code to add blocks before any other rules in INPUT chain 27/07/2005 Repackage for sourceforge release 28/07/2005 Merged changes by Daniel (daniel @ automagic-software.com http://www.automagic-software.com/) - Timer for removing blocked hosts and RedHat init script - note, the init script may not work with your distribution! Contribs welcome!! 11/08/2005 Modified main config to do syslogging (events logged at info level) Also checking that user is root before starting main program run Fixed configure script as it was incorrectly detecting users SysV init folders 16/08/2005 Fixed a bug in some pattern matches, when no IP was detected, the script still tried to carry on regardless. Added some more debug output to aid problem solving New support forums online: http://www.thebmwz3.co.uk/community/ 17/08/2005 Separated configuration from main script file (config is now /etc/breakinguard.conf) to allow for easier upgrades, configuration changes Tidied some core code up NOTE: breakinguard now has 2 processes when listing process list. One for blocking/monitoring log files, one for unblocking/timing. Added new SSH login failure condition to pattern matching 22/08/2005 Changed the stat/mtime call to be more compatible (some perl versions complained with the -> reference) Fixed the init scripts to allow for non sysvinit style systems 21/11/2005 Updated package environment, re-release via sourceforge 05/02/2006 Updated to handle IPV6 headers on IP addresses, thanks to Rick/Scott and Jonathan. 07/02/2006 Fixed bug in IPV6 header handling code from previous release, regex was incorrect
Be the first person to add a text review.
Copyright © 2010 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?
Thanks for your review!
Get credit for your review by logging in via OpenID. Click your account provider: