Hero Image

sshguard improvements

I was looking on the internet for some nice sshguard improvements, and found this nice:

#!/bin/sh
BACKEND='/usr/libexec/sshg-fw-nft-sets'
FILES='/var/log/messages'
THRESHOLD=2
BLOCKTIME=60480
DETECTION_TIME=60480
WHITELIST_FILE=/etc/sshguard/whitelist
BLACKLIST_FILE=20:/etc/sshguard/blacklist.db
IPV4_SUBNET=24

Whitelist should look something like this:

69.96.138.0/24
127.0.0.0/8
70.143.132.81/32
2100:1600:1850:88ff::64

This is for both ipv6 and ipv4