6 Commits

Author SHA1 Message Date
Thorsten Kukuk
3ffb46e8e7 Add extra path for firewall-cmd 2020-02-11 13:27:07 -08:00
Auke Kok
feee1a2556 Add example whitelist defaults. 2019-04-19 14:36:46 -07:00
Auke Kok
32c20f190f Allow multiple patterns.
We do not want to rely solely on one pattern for detecting login
attempts. This change creates a simple static list with patterns that
have a weight. If the pattern matches, the weight is added to the IP
score total. If the score total exceeds the max, the IP is blocked.

Previously we blocked on count=3, now we block when score=1.0.
The weight from the standard invalid user login is now dropped to
0.4 to have the same effect.

The `threshold` parameter is now therefore obsolete, and if found in
the config file, it will be ignored.
2017-12-11 14:04:14 -08:00
Gwenn Gueguen
e3e4388654 Replace path_iptables with ipt_path in sample tallow.conf 2017-05-22 13:46:27 -07:00
Auke Kok
cbcb62c206 Add ipv6 support.
Can be disabled (ipv6=0 in conf).

Also ignores new chain errors since we assume those will fail.
2015-03-21 14:27:10 -07:00
Auke Kok
7022cf147a Example config file. 2012-10-29 16:43:35 -07:00