b2b94c0b3b
http://denyhosts.sourceforge.net/ DenyHosts is a script intended to be run by system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks). In short, it does this by monitoring your syslog output for failed login attempts and tweaking /etc/hosts.deny accordingly, and it can optionally send and fetch lists of ssh probers from a central server. Thanks to joerg@ for review and corrections.
43 lines
1 KiB
Text
43 lines
1 KiB
Text
$NetBSD: patch-aa,v 1.1.1.1 2007/08/02 17:27:30 he Exp $
|
|
|
|
--- denyhosts.cfg-dist.orig 2006-08-20 16:09:57.000000000 +0200
|
|
+++ denyhosts.cfg-dist
|
|
@@ -9,11 +9,14 @@
|
|
# argument
|
|
#
|
|
# Redhat or Fedora Core:
|
|
-SECURE_LOG = /var/log/secure
|
|
+#SECURE_LOG = /var/log/secure
|
|
#
|
|
# Mandrake, FreeBSD or OpenBSD:
|
|
#SECURE_LOG = /var/log/auth.log
|
|
#
|
|
+# NetBSD:
|
|
+SECURE_LOG = @VARBASE@/log/authlog
|
|
+#
|
|
# SuSE:
|
|
#SECURE_LOG = /var/log/messages
|
|
#
|
|
@@ -150,7 +153,7 @@ DENY_THRESHOLD_RESTRICTED = 1
|
|
# Note: it is recommended that you use an absolute pathname
|
|
# for this value (eg. /home/foo/denyhosts/data)
|
|
#
|
|
-WORK_DIR = /usr/share/denyhosts/data
|
|
+WORK_DIR = @VARBASE@/db/denyhosts/data
|
|
#
|
|
#######################################################################
|
|
|
|
@@ -192,10 +195,10 @@ HOSTNAME_LOOKUP=YES
|
|
# running at a time.
|
|
#
|
|
# Redhat/Fedora:
|
|
-LOCK_FILE = /var/lock/subsys/denyhosts
|
|
+#LOCK_FILE = /var/lock/subsys/denyhosts
|
|
#
|
|
-# Debian
|
|
-#LOCK_FILE = /var/run/denyhosts.pid
|
|
+# Debian & NetBSD
|
|
+LOCK_FILE = @VARBASE@/run/denyhosts.pid
|
|
#
|
|
# Misc
|
|
#LOCK_FILE = /tmp/denyhosts.lock
|