On Sun, Dec 24, 2017 at 4:01 AM, Julian Zielke <julian.zielk...@gmail.com>
wrote:
> Out of a sudden over night with no configuration change at all it worked...
>
Strange - the details you have below look correct, so I would expect that
it should work, and the code looks correct to me. Let me know if there are
continued issues.
Thanks,
--Mike
>
>
>
> Am 23.12.17 um 19:18 schrieb Julian Zielke:
>
> Hi, I'm having issues running an external script.
>>
>> ENABLE_EXT_SCRIPT_EXEC is set to Y
>>
>> script variable is: EXTERNAL_SCRIPT /scripts/banip.sh SRCIP;
>>
>> The first line of my script (aside from /bin/sh is:
>>
>> echo "Reporting ${1} to blocklist.de" | logger -t psad
>>
>>
>> However, the script isn't run nd syslog doesn't show me anything, while
>> psad says:
>>
>> Dec 23 19:10:18 xxxxx psad: scan detected (Nmap -sT or -sS scan):
>> xxx.xxx.xxx.xxx -> xxx.xxx.xxx.xxx tcp: Ä21-8080Å flags: SYN tcp pkts: 58
>> DL: 2
>>
>> Dec 23 19:10:18 xxxxx psad: added iptables auto-block against
>> xxx.xxx.xxx.xxx for 3600 seconds
>>
>> So it obviously sees my test scan and should run the script, however it
>> does not.
>>
>> Perms for my script and it's folder are root:root 0750
>>
>> Would be nice to solve this issue.
>>
>> - Julian
>>
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> psad-discuss mailing list
> psad-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/psad-discuss
>
>
--
Michael Rash | Founder
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss
