Skip to content

Commit

Permalink
Filter journal on sshd
Browse files Browse the repository at this point in the history
Without this, it blacklists an IP instantly
  • Loading branch information
SerialVelocity authored Mar 15, 2021
1 parent 6ade717 commit f60680e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion start-sshguard.sh
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
set -eu

BACKEND=${BACKEND:-/usr/lib/x86_64-linux-gnu/sshg-fw-ipset}
LOGREADER=${LOGREADER:-LANG=C /bin/journalctl -afb -p info -n1 -D /var/log/journal -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10}
LOGREADER=${LOGREADER:-LANG=C /bin/journalctl -afb -p info -n1 -D /var/log/journal -u sshd -o cat SYSLOG_FACILITY=4 SYSLOG_FACILITY=10}
THRESHOLD=${THRESHOLD:-30}
BLOCK_TIME=${BLOCK_TIME:-120}
DETECTION_TIME=${DETECTION_TIME:-1800}
Expand Down

0 comments on commit f60680e

Please sign in to comment.