Le 2/17/25 à 22:52, Dan Ritter a écrit :
Greg Wooledge wrote:

Do you have any kind of automation that reads log files?  Like, that
thing whose name I cannot remember right now, that reads ssh's auth.log
file looking for repeated failed logins, and updates your firewall rules.


fail2ban

Logcheck could also potentially be impacted,
it reads from syslog an auth.log by default,
but if the user changes configuration it can read from any other split log 
files.

Best,


--
yassine -- sysadm
http://about.me/ychaouche
Looking for side gigs.

Reply via email to