castris
Verified User
After a review, in which I saw that I didn't have any and I was surprised by the data on bans for login attempts to mysql, I decided to add my own rule via regex.csf.
But I looked at the BFM documentation and was surprised. BFM supposedly has a handle on the issue, but when I read
Well, there is no such log in my Mariadb 10.6 installation
I only found a line in /var/log/syslog about the issue of failed login logs.
I don't know if adding the log to the BFD would help, or if it's something wrong with my installation.
I would prefer to unify it and let BFM do its job, but I don't know where I went wrong, and why I don't have that log...
But I looked at the BFM documentation and was surprised. BFM supposedly has a handle on the issue, but when I read
Well, there is no such log in my Mariadb 10.6 installation
I only found a line in /var/log/syslog about the issue of failed login logs.
I don't know if adding the log to the BFD would help, or if it's something wrong with my installation.
brute_force_mysql_log=/var/lib/mysql/server.hostname.tld.err
Code:
if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =~ /(?:Aborted.*host: '(\d+\.\d+\.\d+\.\d+)'.*without authentication'/)) {
return (“MySQL access denied",$1,”mysqlaccesdenied","2","3306”, “14400”,”0”);
}
I would prefer to unify it and let BFM do its job, but I don't know where I went wrong, and why I don't have that log...