summaryrefslogtreecommitdiffstats
path: root/network/fail2ban/README.SBo
diff options
context:
space:
mode:
Diffstat (limited to 'network/fail2ban/README.SBo')
-rw-r--r--network/fail2ban/README.SBo10
1 files changed, 10 insertions, 0 deletions
diff --git a/network/fail2ban/README.SBo b/network/fail2ban/README.SBo
index 1771505629..2cd74a4b01 100644
--- a/network/fail2ban/README.SBo
+++ b/network/fail2ban/README.SBo
@@ -27,6 +27,16 @@ Making modifications to .local files is the recommended practice as per the
software manual. Each .conf file is overridden by equivalent .local file.
Please refer Configuration section in fail2ban manual.
+NOTE: the default is /etc/ssh/sshd_config is
+
+SyslogFacility AUTH
+
+and that means that sshd logs failed logins in /var/log/messages via syslog.
+
+fail2ban instead looks for failed logins in /var/log/secure and to have sshd
+send them there via syslog the directive AUTHPRIV is needed.
+
+
Changelog:
08/03/2008