Date: Tue, 31 Aug 2004 13:49:21 -0600 (MDT) From: "Ryan Sommers" <ryans@gamersimpact.com> To: current@freebsd.org Subject: Periodic security Message-ID: <50241.208.4.77.15.1093981761.squirrel@www2.neuroflux.com>
next in thread | raw e-mail | index | archive | help
Slight modification to the loginfail script for periodics. This will catch
sshd, proftpd and su errors, as well as other programs, better.
--- 800.loginfail Mon Aug 30 21:50:50 2004
+++ 800.loginfail Mon Aug 30 21:51:53 2004
@@ -59,7 +59,7 @@
[Yy][Ee][Ss])
echo ""
echo "${host} login failures:"
- n=$(catmsgs | grep -ia "^$yesterday.*fail" |
+ n=$(catmsgs | egrep -ia "^$yesterday.*(fail|invalid|bad|illegal)" |
tee /dev/stderr | wc -l)
[ $n -gt 0 ] && rc=1 || rc=0;;
*) rc=0;;
--
Ryan "leadZERO" Sommers
Gamer's Impact President
ryans@gamersimpact.com
ICQ: 1019590
AIM/MSN: leadZERO
-= http://www.gamersimpact.com =-
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50241.208.4.77.15.1093981761.squirrel>