Re: [psad-discuss] Brute force attacks and statistics

[Eli W. <el...@or...>]

On Monday 23 March 2009 23:10:26 Franck Joncourt wrote:
> [...]
> >> Should I avoid working this way?
> > 
> > I just scanned the doucmentation. And I see that fail2ban is quite 
> > capable of notifiying you of its activity. So the questions are: Why 
> > would do you want to work this hard? And why would you have your 
> > computer do extra work (no matter how trivial) when you and it don't 
> > need to?
> 
> I must admit you are right :)
> 
> I started with Michael's scripts and updated them to work with psad
> rather than the psad fifo and kmsgsd. Then I moved to fail2ban for a try
> but sticked to psad as well.
> 
> > What you can do is filter your incoming email to stick PSAD alerts in
> >  one folder mail coming from fail2ban in another. You wouldn't need
> > to keep track of the logs. These programs will do it for you. You can
> >  just monitor your email; if you want to.
> 
> Ok, you have convinced me. I will move to a full fail2ban setup and work
> as you said.
> 
> Thanks,
> 
Glad I could be of some help.

Eli

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.