-[ Покотиленко Костик 17/12/2008 16:36 (GMT +3)
> Fail2ban scans log files like /var/log/pwdfail
> or /var/log/apache/error_log and bans IP
> ^^^^^^^^^^^^^^^
> that makes too many password failures. It updates firewall rules to
> reject the IP address.
Тем не менее, ssh оно умеет смотреть.
Здесь не сказано что этими логами оно ограничивается.
$ aptitude show fail2ban
Пакет: fail2ban
<...>
Описание: bans IPs that cause multiple authentication errors
Monitors log files (e.g. /var/log/auth.log, /var/log/apache/access.log) and temporarily or persistently bans failure-prone addresses by
updating existing firewall rules.
<...>
--
Best regards,
Mikhail
Attachment:
signature.asc
Description: This is a digitally signed message part.