Check if this is enabled in the config. SHOW_ALL_SIGNATURES If set to "Y" instructs psad to either include all scan signatures associated with an IP address in every new email alert for the IP. Note that this may result in long email alerts if an IP is persistantly hitting your site with suspicious traffic over a long period of time. SHOW_ALL_SIGNATURES is set to "N" by default and hence psad will only display alert information associate with new signatures. SHOW_ALL_SIGNATURES N;
-----Opprinnelig melding----- Fra: Bill Hudacek [mailto:bill.huda...@gmail.com] Sendt: fredag 25. november 2016 06:05 Til: psad-discuss@lists.sourceforge.net Emne: [psad-discuss] PSAD notifications Hvis du ikke ønsker slike eposter i fremtiden vennligst benytt deg av avmeldingslinken vedlagt i eposten nedenfor. [apologies if this is a duplicate. I subscribed, sent this note, and have not seen it - or any replies - nor any other traffic from the list. gmail is not putting anything from the list in the spam folder. Is this thing on?] I'm on CentOS 6.8 - knowing I need to update to get to v7.x... so I have psad-2.2.3-1.el6.i686. I was getting email notifications with this subject: [psad-status] added iptables auto-block against 1.2.3.4 for NN seconds and [psad-status] removed iptables block against 1.2.3.4 The emails are empty. Separately, I get DLn messages that include info on ports, whois info, etc. These are welcomed. I managed to only disable the DLn messages - the opposite of what I intended. How can I only disable these empty notifications? I searched the mailing list before subscribing, but didn't see anything relevant. -- /Bill ------------------------------------------------------------------------------ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss ------------------------------------------------------------------------------ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
