Menu
▾
▴
Re: [Fail2ban-users] Add fail2ban to your logwatch daily report
|
From: Yaroslav H. <li...@on...> - 2006-03-25 05:08:48
|
Please see fresh version attached. Hopefully this time it will satisfy
everyone's needs ;-)
Sample outputs:
Verbose (Detail >=10):
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
SSH: [ 6:6 ]
210.103.124.7 1:1
Failed 5 times
210.14.28.59 1:1
Failed 5 times
165.230.95.72 (tractatus.rutgers.edu) 4:4
Failed 5 5 5 5 times
VSFTPD: [ 1:1 ]
72.9.234.170 (star.dnsprotect.com) 1:1
**Unmatched Entries**
2006-03-05 18:13:24,365 WARNING: is not a valid IP address
2006-03-12 07:50:09,404 WARNING: is not a valid IP address
Regular (Detail==5)
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
SSH: [ 6:6 ]
210.103.124.7 1:1
210.14.28.59 1:1
165.230.95.72 (tractatus.rutgers.edu) 4:4
VSFTPD: [ 1:1 ]
72.9.234.170 (star.dnsprotect.com) 1:1
**Unmatched Entries**
2006-03-05 18:13:24,365 WARNING: is not a valid IP address
2006-03-12 07:50:09,404 WARNING: is not a valid IP address
Minimal verbosity (Detail == 0):
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
SSH: [ 6:6 ]
VSFTPD: [ 1:1 ]
---------------------- fail2ban-messages End -------------------------
Please mention that I excluded Unmatched Entries for Detail=0
I believe I didn't change anything in the logic so if previous one
worked for you, this one should work as well.
Enjoy
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
|