Re: [Sshguard-users] Skip blocking, ban directly

[Kevin Z. <kev...@gm...>]

On 04/12/2016 00:42, Benno Zeeman wrote:
> I'm running sshguard on a simple up-to-date Arch Linux server. According
> to the Arch wiki you can ban users after a single failed login. I'd like
> to do something similar, but with three failed login attempts.
> 
> Problem is that "-a 1 -b 30:/var/db/sshguard/blacklist.db" doesn't work,
> as sshguard doesn't accept an abuse threshold below 10. So, how to
> disable the abuse threshold, and skip the blocking.

You should set -a to 10 (the default score for each attack). The -a
argument is given a score, not the number of attacks.

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090