Hey folks,

Been using slackware 14.1 since it was released ages ago. in an attempt to cut down on brute force attacks in real time I installed fail2ban, which works great for the most part... except in circumstances where the brute force is happening fast enough to trigger syslog's compression mechanisms. Normally having the same 150 some lines compacted into a simple "last message repeated X times" would be ideal, but not for a bot that's trying to put a stop to abuse in an automated fashion.

After some google research I noticed that FreeBSD's version can be called with a -c on the command line to disable this but sysklogd that's included with Slackware doesn't offer such an option.

Any ideas?

fail2ban version 0.8.3
sysklogd version 1.5.1

http://alt.os.linux.slackware.narkiv...peated-x-times (DISCLAIMER: not tested here)

Here's a better patch.

Attached Files

sysklogd.allow.repeated.messages.diff.txt (2.0 KB, 360 views)

2 members found this post helpful.

Much appreciated guys