I am not sure if this is possible as I have not been able to find it, but can you configure CSF to look at another logfile and based on information cause a lock on an IP or PORT based on what it sees?
Example: I have another application that allows people to log on and would like CSF to watch that applications log files and issue a block if they have x number of invalid attempts.
I know I might be able to write another process that checks the logfile and issues a csf command to block the account but would be nice to do it all in CSF.
Thanks!
Process other Logfiles
-
- Moderator
- Posts: 1524
- Joined: 01 Oct 2008, 09:24
Re: Process other Logfiles
You can write your own regex hook using /etc/csf/regex.custom.pm