| commit | author | age | ||
| 77f371 | 1 | [DEFAULT] |
| T | 2 | # 24h + 5min |
| 3 | # Time to keep banned a bad ip | |
| 4 | watch_while = 86700 | |
| 5 | # Max tries before being bannes | |
| 6 | maxtries = 3 | |
| 7 | # pf table to keep bad IP. | |
| 8 | # remember to clean the table with this command in a cron job : | |
| 9 | # pfctl -t vilain_bruteforce -T expire 86400 | |
| 10 | vilain_table = vilain_bruteforce | |
| 11 | ||
| 12 | ### Guardians | |
| 13 | #[name of the guardian] | |
| 14 | #logfile = /file/to/watch | |
| 15 | #regex = regex that return the bad guy IP | |
| 16 | ||
| 17 | [ssh] | |
| 18 | logfile = /var/log/authlog | |
| 19 | regex = .* Failed .* from ([\S]+) .* | |
| 20 | ||
| 21 | [ssh2] | |
| 22 | logfile = /var/log/authlog | |
| 23 | regex = .* Connection closed by ([\S]+) .* | |
| 24 | ||
