Hi there,
From what I can make out, the settings are correct to only receive notifications for successful logins via SSH.
# Send an email alert if anyone logs in successfully using SSH
LF_SSH_EMAIL_ALERT = "1"
LF_PERMBLOCK_ALERT = "0"
Though we're still receiving alerts when there are blocks caused by failed SSH logins.
Time: Mon Jan 17 23:29:24 2022 +1000
IP: 0.0.0.0 (ZZ/Country/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked: Permanent Block [LF_SSHD]
Log entries:
Jan 17 23:29:10 ...
How do we go about stopping these emails?
Thank you!
LF_PERMBLOCK_ALERT off, but Failed SSHD alerts are sent?
-
- Junior Member
- Posts: 3
- Joined: 05 Nov 2018, 21:51