Files
tallow/tallow.conf
Auke Kok 32c20f190f Allow multiple patterns.
We do not want to rely solely on one pattern for detecting login
attempts. This change creates a simple static list with patterns that
have a weight. If the pattern matches, the weight is added to the IP
score total. If the score total exceeds the max, the IP is blocked.

Previously we blocked on count=3, now we block when score=1.0.
The weight from the standard invalid user login is now dropped to
0.4 to have the same effect.

The `threshold` parameter is now therefore obsolete, and if found in
the config file, it will be ignored.
2017-12-11 14:04:14 -08:00

8 lines
124 B
Plaintext

# tallow.conf - see `man tallow.conf` for more information
#ipt_path=/usr/sbin
#expires=3600
#whitelist=127.0.0.1
#ipv6=0