• 13-08-2008, 12:09:30
    #10
    Üyeliği durduruldu
    Alıntı
    #!/bin/bash
    #
    # BFD 1.2 [bfd@r-fx.org]
    # Copyright (C) 1999-2008, R-fx Networks <proj@r-fx.org>
    # Copyright (C) 2008, Ryan MacDonald <ryan@r-fx.org>
    # This program may be freely redistributed under the terms of the GNU GPL
    #
    # NOTE: This file should be edited with word/line wrapping off,
    # if your using pico please start it with the -w switch.
    # (e.g: pico -w filename)
    #

    # how many failure events must an address have before being blocked?
    # you can override this on a per rule basis in /usr/local/bfd/rules/
    TRIG="15"

    # send email alerts for all events [0 = off; 1 = on]
    EMAIL_ALERTS="0"

    # local user or email address alerts are sent to (separate multiple with comma)
    EMAIL_ADDRESS="root"

    # subject of email alerts
    EMAIL_SUBJECT="Brute Force Warning for $HOSTNAME"

    # executable command to block attacking hosts
    BAN_COMMAND="/etc/apf/apf -d $ATTACK_HOST {bfd.$MOD}"

    ######
    # You should not need to edit any options below this line
    ######

    # installation path
    INSTALL_PATH="/usr/local/bfd"

    # rule files path
    RULES_PATH="$INSTALL_PATH/rules"

    # track log script path
    TLOG_PATH="$INSTALL_PATH/tlog"

    # syslog kernel log path
    KERNEL_LOG_PATH="/var/log/messages"

    # syslog auth log path
    AUTH_LOG_PATH="/var/log/secure"

    # bfd application log path
    BFD_LOG_PATH="/var/log/bfd_log"

    # log all events to syslog [0 = off; 1 = on]
    OUTPUT_SYSLOG="1"

    # log file path for syslog logging
    OUTPUT_SYSLOG_FILE="$KERNEL_LOG_PATH"

    # log file path for syslog logging
    OUTPUT_SYSLOG_FILE="$KERNEL_LOG_PATH"

    # template of the email message body
    EMAIL_TEMPLATE="$INSTALL_PATH/alert.bfd"

    # contains list of files to search for addresses that are excluded from bans
    IGNORE_HOST_FILES="$INSTALL_PATH/exclude.files"

    # grab the local time zone
    TIME_ZONE=`date +"%z"`

    # grab the local unix time
    TIME_UNIX=`date +"%s"`

    # lock file path
    LOCK_FILE="$INSTALL_PATH/lock.utime"

    # lock file timeout
    LOCK_FILE_TIMEOUT="300"

    dosya bu...
  • 13-08-2008, 14:09:40
    #11
    EMAIL_ALERTS="0"

    bu kısmı,

    EMAIL_ALERTS="1"


    olarak değitşir ve

    EMAIL_ADDRESS="root"

    root yazan yere kendı mail adresini yaz.