I understand the score value. If it is set to 10, it will block a user. I don't want anything temporarily; I don't want it to block, I want it to ban at a score of 30 (3 attacks).
Thanks for responding,bzeeman
> To: ssh...@li...
> From: kev...@gm...
> Date: Tue, 12 Apr 2016 07:50:46 -0700
> Subject: Re: [Sshguard-users] Skip blocking, ban directly
>
> On 04/12/2016 00:42, Benno Zeeman wrote:
> > I'm running sshguard on a simple up-to-date Arch Linux server. According
> > to the Arch wiki you can ban users after a single failed login. I'd like
> > to do something similar, but with three failed login attempts.
> >
> > Problem is that "-a 1 -b 30:/var/db/sshguard/blacklist.db" doesn't work,
> > as sshguard doesn't accept an abuse threshold below 10. So, how to
> > disable the abuse threshold, and skip the blocking.
>
> You should set -a to 10 (the default score for each attack). The -a
> argument is given a score, not the number of attacks.
>
> Best,
> Kevin
>
> --
> Kevin Zheng
> kev...@gm... | ke...@be... | PGP: 0xC22E1090
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users
|
