Ubuntu 22.04 and logs mariadb /var/lib/mysql/server.hostname.tld.err

castris

Verified User
Joined
Apr 16, 2021
Messages
96
Location
Arcenillas
After a review, in which I saw that I didn't have any and I was surprised by the data on bans for login attempts to mysql, I decided to add my own rule via regex.csf.

But I looked at the BFM documentation and was surprised. BFM supposedly has a handle on the issue, but when I read

Well, there is no such log in my Mariadb 10.6 installation

I only found a line in /var/log/syslog about the issue of failed login logs.

I don't know if adding the log to the BFD would help, or if it's something wrong with my installation.

brute_force_mysql_log=/var/lib/mysql/server.hostname.tld.err

Code:
 if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =~ /(?:Aborted.*host: '(\d+\.\d+\.\d+\.\d+)'.*without authentication'/)) {
   return (“MySQL access denied",$1,”mysqlaccesdenied","2","3306”, “14400”,”0”);
}


I would prefer to unify it and let BFM do its job, but I don't know where I went wrong, and why I don't have that log...
 
Back
Top