|
From: Benno Z. <bz...@li...> - 2016-04-12 15:10:47
|
I understand the score value. If it is set to 10, it will block a user. I don't want anything temporarily; I don't want it to block, I want it to ban at a score of 30 (3 attacks). Thanks for responding,bzeeman > To: ssh...@li... > From: kev...@gm... > Date: Tue, 12 Apr 2016 07:50:46 -0700 > Subject: Re: [Sshguard-users] Skip blocking, ban directly > > On 04/12/2016 00:42, Benno Zeeman wrote: > > I'm running sshguard on a simple up-to-date Arch Linux server. According > > to the Arch wiki you can ban users after a single failed login. I'd like > > to do something similar, but with three failed login attempts. > > > > Problem is that "-a 1 -b 30:/var/db/sshguard/blacklist.db" doesn't work, > > as sshguard doesn't accept an abuse threshold below 10. So, how to > > disable the abuse threshold, and skip the blocking. > > You should set -a to 10 (the default score for each attack). The -a > argument is given a score, not the number of attacks. > > Best, > Kevin > > -- > Kevin Zheng > kev...@gm... | ke...@be... | PGP: 0xC22E1090 > > ------------------------------------------------------------------------------ > Find and fix application performance issues faster with Applications Manager > Applications Manager provides deep performance insights into multiple tiers of > your business applications. It resolves application problems quickly and > reduces your MTTR. Get your free trial! > https://ad.doubleclick.net/ddm/clk/302982198;130105516;z > _______________________________________________ > Sshguard-users mailing list > Ssh...@li... > https://lists.sourceforge.net/lists/listinfo/sshguard-users |