slackbuilds_ponce/network/sshblock/sshblock.tpl
Willy Sudiarto Raharjo 8d0150f686 network/sshblock: Added (an SSH dictionary-attack blocker).
Signed-off-by: Matteo Bernardini <ponce@slackbuilds.org>
2012-12-16 22:16:31 +01:00

8 lines
324 B
Smarty

watchfor /Failed password for invalid user \w+ from ([\d\.]+) port/
exec "/usr/sbin/sshblock.pl $1"
threshold track_by=$1, type=threshold, count=3, seconds=90
watchfor /Failed password for root from ([\d\.]+) port/
exec "/usr/sbin/sshblock.pl $1"
threshold track_by=$1, type=threshold, count=3, seconds=30