cvs commit: ports/security/sshguard Makefile ports/security/sshguard/files pkg-message.in sshguard.in

Andrey Chernov ache at FreeBSD.ORG
Wed Jun 27 19:42:12 UTC 2012


On Wed, Jun 27, 2012 at 12:22:55AM +0000, Xin LI wrote:
> delphij     2012-06-27 00:22:55 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     security/sshguard    Makefile 
>     security/sshguard/files pkg-message.in 
>   Added files:
>     security/sshguard/files sshguard.in 
>   Log:
>   Add a rc.d script to daemonize sshguard.
>   
>   Submitted by:   delphij
>   PR:             ports/166471
>   Approved by:    maintainer timeout (~3 months)

In sshguard.in:

1) You use
sshguard_blacklist="40:/var/db/sshguard/blacklist.db"
where thr (40) is too low. sshguard(1) manpage have error: according to 
source code thr is measured in
(number_of_abuses * DEFAULT_ABUSE_THRESHOLD)
with default
(3 * DEFAULT_ABUSE_THRESHOLD)
and not in simple number_of_abuses as manpage states. Since 
DEFAULT_ABUSE_THRESHOLD is 10, 400 is what you mean.

2) What about users which don't want any permament blacklist? Currently
sshguard_blacklist is required parameter, since -b is hardcoded in 
the command line.

-- 
http://ache.vniz.net/


More information about the cvs-all mailing list