Re: [Fail2ban-users] Ubuntu 10.04 and fail2ban

[Arturo 'B. B. <bu...@bu...>]

On 07/01/2010 09:48 AM, Frederic BOUY wrote:
> installed the version 0.8.4-1ubuntu1 of fail2ban and can not manage to
> make it work due to the fact that I got only one line for multiple
> failled connections as you can see in the following messages in
> /var/log/auth.log:
>
>     Jul  1 13:42:29 toto sshd[5523]: *last message repeated 5 time*s
> Do you have any clue on the way to solve this issue?

sudo sed -i 's/RepeatedMsgReduction\ on/RepeatedMsgReduction\ off/' /etc/rsyslog.conf

That command changes 'on' to 'off' for the RepeatedMsgReduction configuration parameter for 
/etc/rsyslog.conf

After that, restart rsyslog with:

sudo service rsyslog restart

-- 
Arturo "Buanzo" Busleiman
Independent Linux and Security Consultant - OWASP - SANS - OISSG
http://www.buanzo.com.ar/pro/eng.html