Hi Micheal, Thanks a lot for the quick response and seems this is pretty much what I really needed. However, just a minor problem and i'm not that strong in sed to fix it.
In the /scripts/bad-ips file, I get entries like 222.98.152.130 port 60800 ssh2 222.98.152.130 port 60830 ssh2 222.98.152.130 port 60837 ssh2 222.98.152.130 port 60839 ssh2
Can you post a line from your log so I can see what it looks like. That code works fine on syslog-ng and the latest SSHD. Make sure that you change Your ip address in what you post.
Thanks
Michael.
-- [email protected] mailing list
