mirror of
https://github.com/clearlinux/tallow.git
synced 2026-05-14 01:43:49 +00:00
We do not want to rely solely on one pattern for detecting login attempts. This change creates a simple static list with patterns that have a weight. If the pattern matches, the weight is added to the IP score total. If the score total exceeds the max, the IP is blocked. Previously we blocked on count=3, now we block when score=1.0. The weight from the standard invalid user login is now dropped to 0.4 to have the same effect. The `threshold` parameter is now therefore obsolete, and if found in the config file, it will be ignored.
8 lines
124 B
Plaintext
8 lines
124 B
Plaintext
|
|
# tallow.conf - see `man tallow.conf` for more information
|
|
|
|
#ipt_path=/usr/sbin
|
|
#expires=3600
|
|
#whitelist=127.0.0.1
|
|
#ipv6=0
|