sshguard-users

[SSHGuard-users] Blacklist

[Jos C. <jo...@cl...>]

I want to blacklist a certain ip address manually / ad an ip address in 
SSHGuard's blacklist.
Can you tell me how I can do that? So I am not using ipfw for that (in 
the end it has the same result, I know).

Thanks!

Re: [SSHGuard-users] Blacklist

[Kevin Z. <kev...@gm...>]

On 12/25/2016 07:49, Jos Chrispijn wrote:
> I want to blacklist a certain ip address manually / ad an ip address in
> SSHGuard's blacklist.
> Can you tell me how I can do that? So I am not using ipfw for that (in
> the end it has the same result, I know).

Stop SSHGuard, edit the blacklist file using a text editor, and start 
SSHGuard again.

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090

Re: [SSHGuard-users] Blacklist

[Jos C. <ssh...@cl...>]

Thanks, but I am not quite sure what the first three columns mean in 
that file:

1478009645|260|4|xxx.xxx.xxx.xxx

Are they adjusted by sshguard when needed?

thanks,
Jos

Op 25-12-2016 om 16:27 schreef Kevin Zheng:
> On 12/25/2016 07:49, Jos Chrispijn wrote:
>> I want to blacklist a certain ip address manually / ad an ip address in
>> SSHGuard's blacklist.
>> Can you tell me how I can do that? So I am not using ipfw for that (in
>> the end it has the same result, I know).
> Stop SSHGuard, edit the blacklist file using a text editor, and start
> SSHGuard again.
>
> Best,
> Kevin
>


-- With both feed on the ground you will never make a step forward

Re: [SSHGuard-users] Blacklist

[Kevin Z. <kev...@gm...>]

On 12/28/2016 15:50, Jos Chrispijn wrote:
> Thanks, but I am not quite sure what the first three columns mean in
> that file:
>
> 1478009645|260|4|xxx.xxx.xxx.xxx

Unix time stamp of block (unused), service code (unused), IP address 
family (4 or 6), and IP address

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090