Re: [Sshguard-users] Email notification, when host is banned

[Mij <mi...@ss...>]

Hi Mika,

> Is it possible to set SSHGuard to send email notifications when host
> is banned? Something like what sudo always sends when user isn't on
> sudoers file.

For the sshguard part:
This has been in TODO for over a year as part of a more general framework
to program custom reactions to any event.

So far this was possible by design, but it took defining a bunch of macros and
recompiling sshguard to define custom actions. The SVN code (r232 on)
support this with a "-e custom_script" option, but some time will go before you
see this into a release.

For the general line: other tools are specialized for this task; notably, you'll
find some that can do event correlation.

michele