[Bug 221602] security/sshguard: configuration inconvenience wrt blacklisting

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221602

--- Comment #5 from Kevin Zheng <kevinz5000 at gmail.com> ---
Created attachment 222508
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=222508&action=edit
Patch

I've attached a patch with the requested changes. More detail is in the patch
body, which is reproduced below:

The sshguard_blacklist rcvar always overrides the setting in
sshguard.conf. Since the rc.d script sets sshguard_blacklist, the
blacklist option in sshguard.conf is never used.

This patch removes the default rcvar setting, and instead enables
blacklisting in the example sshguard.conf. (Note that this is a
traditional FreeBSD ports default, not an upstream default.)

New users (with no existing sshguard.conf) will see no change. Users
with existing sshguard.conf will have blacklisting turned off until they
update their sshguard.conf.

Though, I want to ask those CC'd on the patch here, what do you think about
leaving blacklisting off by default?

-- 
You are receiving this mail because:
You are the assignee for the bug.