From: Oliver F. <ol...@fa...> - 2014-04-30 06:48:00
|
How can I get ipfw-sshguard working for mail and smtp? It definitely works for ssh, that is checked and works This is what I added to /etc/rc.conf firewall_enable="YES" firewall_type="simple" firewall_script="/etc/ipfw.rules" firewall_logging="YES" sshguard_enable="YES" sshguard_pidfile="/var/run/sshguard.pid" sshguard_watch_logs="/var/log/auth.log:/var/log/exim/mainlog:/var/log/maillog" sshguard_flags="" To /etc/syslog.conf I added: auth.info;authpriv.info /var/log/auth.log mail.info /var/log/maillog smtp.info /var/log/exim/mainlog and: auth.info;authpriv.info;mail.info;smtp.info;ftp.info |exec /usr/local/sbin/sshguard -w xx.xx.xx.xx What else do I need to get it to check the exim mainlog and add ips to the block? thanks OliverJim |