MFH: r471012
Increase the default blacklist threshold from 30 to 120, which is the upstream default. 30 makes it far too easy to get locked out of your own server. 120 is simply a safer starting point. PR: 227016 Submitted by: Dan McGregor (maintainer) Approved by: ports-secteam (feld)
This commit is contained in:
parent
3d1ce6403b
commit
0efcd13acd
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/branches/2018Q2/; revision=471092
@ -3,6 +3,7 @@
|
||||
|
||||
PORTNAME= sshguard
|
||||
PORTVERSION= 2.1.0
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= security
|
||||
MASTER_SITES= SF/sshguard/sshguard/${PORTVERSION}
|
||||
|
||||
|
@ -25,7 +25,7 @@
|
||||
# Colon-separated blacklist threshold and full path to blacklist file.
|
||||
# (optional, no default)
|
||||
-#BLACKLIST_FILE=90:/var/lib/sshguard/enemies
|
||||
+#BLACKLIST_FILE=30:/var/db/sshguard/blacklist.db
|
||||
+#BLACKLIST_FILE=120:/var/db/sshguard/blacklist.db
|
||||
|
||||
# IP addresses listed in the WHITELIST_FILE are considered to be
|
||||
# friendlies and will never be blocked.
|
||||
|
@ -67,7 +67,7 @@ rcvar=sshguard_enable
|
||||
load_rc_config sshguard
|
||||
|
||||
: ${sshguard_enable:=NO}
|
||||
: ${sshguard_blacklist=30:/var/db/sshguard/blacklist.db}
|
||||
: ${sshguard_blacklist=120:/var/db/sshguard/blacklist.db}
|
||||
: ${sshguard_danger_thresh=}
|
||||
: ${sshguard_release_interval=}
|
||||
: ${sshguard_reset_interval=}
|
||||
|
Loading…
Reference in New Issue
Block a user