From: Mij <mi...@bi...> - 2009-03-16 02:28:57
|
As SimCList is used for recording those, there is no such limit by design. What evidence makes you think that (nothing logged, errors or else)? Run sshguard in interactive mode (add -d) and paste attack lines repeatedly, change address once one has been blocked, and please report what happens at the 17th time. On Mar 10, 2009, at 14:01 , Greg Parrish wrote: > Hi, > > I am using the following parameters for sshguard (v1.3). I know the -p > is huge and we dont mind blacklisting intruders for long periods. I > noticed today in logwatch and from further testing that once we reach > about 16 entries in the accumulated list for iptables that no further > entries are being accepted. > > /usr/local/sbin/sshguard -a 2 -p 25920000 -s 1800 -w /etc/ > sshguard.whitelist > > Please review and let me know if you need more information or logs. > I am > wondering if there is a limit somewhere in the binary or if this is by > design. > > Thanks, > greg > > > ------------------------------------------------------------------------------ > _______________________________________________ > Sshguard-users mailing list > Ssh...@li... > https://lists.sourceforge.net/lists/listinfo/sshguard-users |