Re: [SSHGuard-users] Feedback needed on 1.7.0

[<li...@la...>]

Since this is a major change, can 1.7.0 be tested without being the daemon? That build the code, but don't do the make install step, then run the code from where it was built.

While I have your ear, is there some way to flush/reset table 22? Mine seems to be on permanent block.


  Original Message  
From: Kevin Zheng
Sent: Monday, July 25, 2016 4:23 PM
To: ssh...@li...
Subject: [SSHGuard-users] Feedback needed on 1.7.0

Dear SSHGuard users,

SSHGuard 1.7.0 was planned for August, bringing bug fixes, backend
changes, and minor attack signature improvements. Some of these changes
need feedback and testing, and the release won't happen without you!

In no particular order, items that need feedback:

Backends have been rewritten. PF is well-tested, IPFW should work, but
iptables is untested because I don't have a Linux box handy.

The hosts backend should work but needs more testing. If it turns out
that nobody cares about testing/running it I'll drop it from 1.7.0.

Does process validation still work? Should it be dropped from 1.7.0?

LogSucker is deprecated. If you're having issues, use sshg-logtail to
monitor your logs and pipe it into SSHGuard. In future releases "-l" may
just be a convenience flag that invokes sshg-logtail.

External hooks are gone. If you need hooks, edit the sshg-fw script.

sshg-fw and sshg-parser are installed in libexec. Only sshg-fw is
currently needed for SSHGuard to run, but sshg-parser is useful for
checking if your logs are correctly parsed.

To test, check out the 'master' branch from SSHGuard's Bitbucket
repository. If there's anything I can do to make testing easier, please
let me know.

Thanks,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
sshguard-users mailing list
ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users