Date: Wed, 27 Jun 2012 23:39:34 +0400 From: Andrey Chernov <ache@FreeBSD.ORG> To: Xin LI <delphij@FreeBSD.ORG> Cc: cvs-ports@FreeBSD.ORG, cvs-all@FreeBSD.ORG, ports-committers@FreeBSD.ORG Subject: Re: cvs commit: ports/security/sshguard Makefile ports/security/sshguard/files pkg-message.in sshguard.in Message-ID: <20120627193934.GA17292@vniz.net> In-Reply-To: <201206270022.q5R0Mt8X097020@repoman.freebsd.org> References: <201206270022.q5R0Mt8X097020@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jun 27, 2012 at 12:22:55AM +0000, Xin LI wrote: > delphij 2012-06-27 00:22:55 UTC > > FreeBSD ports repository > > Modified files: > security/sshguard Makefile > security/sshguard/files pkg-message.in > Added files: > security/sshguard/files sshguard.in > Log: > Add a rc.d script to daemonize sshguard. > > Submitted by: delphij > PR: ports/166471 > Approved by: maintainer timeout (~3 months) In sshguard.in: 1) You use sshguard_blacklist="40:/var/db/sshguard/blacklist.db" where thr (40) is too low. sshguard(1) manpage have error: according to source code thr is measured in (number_of_abuses * DEFAULT_ABUSE_THRESHOLD) with default (3 * DEFAULT_ABUSE_THRESHOLD) and not in simple number_of_abuses as manpage states. Since DEFAULT_ABUSE_THRESHOLD is 10, 400 is what you mean. 2) What about users which don't want any permament blacklist? Currently sshguard_blacklist is required parameter, since -b is hardcoded in the command line. -- http://ache.vniz.net/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120627193934.GA17292>