- up to 2.6

[packages/DenyHosts.git] / DenyHosts.cfg

diff --git a/DenyHosts.cfg b/DenyHosts.cfg
index fc9821d7940865599851e755d1f308345aea1f11..299cd2e28549af9040e6bd206a762aa4fc1a2adc 100644 (file)
--- a/DenyHosts.cfg
+++ b/DenyHosts.cfg
@@ -17,7 +17,7 @@ SECURE_LOG = /var/log/secure
 # SuSE:
 #SECURE_LOG = /var/log/messages
 #
-# Mac OS X (v10.4 or greater -
+# Mac OS X (v10.4 or greater - 
 #   also refer to:   http://www.denyhosts.net/faq.html#macos
 #SECURE_LOG = /private/var/log/asl.log
 #
@@ -27,6 +27,7 @@ SECURE_LOG = /var/log/secure
 ########################################################################
 
 ########################################################################
+#
 # HOSTS_DENY: the file which contains restricted host access information
 #
 # Most operating systems:
@@ -39,7 +40,9 @@ HOSTS_DENY = /etc/tcpd/hosts.deny
 #HOSTS_DENY = /etc/hosts.evil
 #######################################################################
 
+
 ########################################################################
+#
 # PURGE_DENY: removed HOSTS_DENY entries that are older than this time
 #             when DenyHosts is invoked with the --purge flag
 #
@@ -63,19 +66,21 @@ PURGE_DENY =
 
 #######################################################################
 #
-# PURGE_THRESHOLD: defines the maximum times a host will be purged.
-# Once this value has been exceeded then this host will not be purged.
+# PURGE_THRESHOLD: defines the maximum times a host will be purged.  
+# Once this value has been exceeded then this host will not be purged. 
 # Setting this parameter to 0 (the default) disables this feature.
 #
 # default: a denied host can be purged/re-added indefinitely
 #PURGE_THRESHOLD = 0
 #
-# a denied host will be purged at most 2 times.
-#PURGE_THRESHOLD = 2
+# a denied host will be purged at most 2 times. 
+#PURGE_THRESHOLD = 2 
 #
 #######################################################################
 
+
 #######################################################################
+#
 # BLOCK_SERVICE: the service name that should be blocked in HOSTS_DENY
 # 
 # man 5 hosts_access for details
@@ -93,6 +98,7 @@ BLOCK_SERVICE  = sshd
 #
 #######################################################################
 
+
 #######################################################################
 #
 # DENY_THRESHOLD_INVALID: block each host after the number of failed login 
@@ -124,16 +130,18 @@ DENY_THRESHOLD_ROOT = 1
 #
 #######################################################################
 
+
 #######################################################################
 #
-# DENY_THRESHOLD_RESTRICTED: block each host after the number of failed
-# login attempts has exceeded this value.  This value applies to
+# DENY_THRESHOLD_RESTRICTED: block each host after the number of failed 
+# login attempts has exceeded this value.  This value applies to 
 # usernames that appear in the WORK_DIR/restricted-usernames file only.
 #
 DENY_THRESHOLD_RESTRICTED = 1
 #
 #######################################################################
 
+
 #######################################################################
 #
 # WORK_DIR: the path that DenyHosts will use for writing data to
@@ -172,6 +180,7 @@ HOSTNAME_LOOKUP=YES
 #
 ######################################################################
 
+
 ######################################################################
 #
 # LOCK_FILE
@@ -204,15 +213,19 @@ LOCK_FILE = /var/lock/subsys/denyhosts
 # match your email address.  If you do not want to receive these reports
 # leave this field blank (or run with the --noemail option)
 #
+# Multiple email addresses can be delimited by a comma, eg:
+# ADMIN_EMAIL = foo@bar.com, bar@foo.com, etc@foobar.com
+#
 ADMIN_EMAIL = root@localhost
 #
 #######################################################################
 
 #######################################################################
 #
-# SMTP_HOST and SMTP_PORT: if DenyHosts is configured to email
-# reports (see ADMIN_EMAIL) then these settings specify the
+# SMTP_HOST and SMTP_PORT: if DenyHosts is configured to email 
+# reports (see ADMIN_EMAIL) then these settings specify the 
 # email server address (SMTP_HOST) and the server port (SMTP_PORT)
+# 
 #
 SMTP_HOST = localhost
 SMTP_PORT = 25
@@ -220,14 +233,14 @@ SMTP_PORT = 25
 #######################################################################
 
 #######################################################################
-#
-# SMTP_USERNAME and SMTP_PASSWORD: set these parameters if your
+# 
+# SMTP_USERNAME and SMTP_PASSWORD: set these parameters if your 
 # smtp email server requires authentication
 #
 #SMTP_USERNAME=foo
 #SMTP_PASSWORD=bar
 #
-#######################################################################
+######################################################################
 
 #######################################################################
 #
@@ -321,22 +334,23 @@ AGE_RESET_ROOT=25d
 #
 ######################################################################
 
-######################################################################
-#
+###################################################################### 
+# 
 # AGE_RESET_RESTRICTED: Specifies the period of time between failed login
-# attempts that, when exceeded will result in the failed count for
-# this host to be reset to 0.  This value applies to all login
-# attempts to entries found in the WORK_DIR/restricted-usernames file.
+# attempts that, when exceeded will result in the failed count for 
+# this host to be reset to 0.  This value applies to all login 
+# attempts to entries found in the WORK_DIR/restricted-usernames file.  
 # If not defined, the count will never be reset.
 #
-# See the comments in the PURGE_DENY section (above)
-# for details on specifying this value or for complete details
+# See the comments in the PURGE_DENY section (above) 
+# for details on specifying this value or for complete details 
 # refer to:  http://denyhosts.sourceforge.net/faq.html#timespec
 #
 AGE_RESET_RESTRICTED=25d
 #
 ######################################################################
 
+
 ###################################################################### 
 # 
 # AGE_RESET_INVALID: Specifies the period of time between failed login
@@ -353,11 +367,12 @@ AGE_RESET_INVALID=10d
 #
 ######################################################################
 
+
 ######################################################################
 #
 # RESET_ON_SUCCESS: If this parameter is set to "yes" then the
 # failed count for the respective ip address will be reset to 0
-# if the login is successful.
+# if the login is successful.  
 #
 # The default is RESET_ON_SUCCESS = no
 #
@@ -365,6 +380,7 @@ AGE_RESET_INVALID=10d
 #
 #####################################################################
 
+
 ######################################################################
 #
 # PLUGIN_DENY: If set, this value should point to an executable
@@ -551,6 +567,8 @@ DAEMON_PURGE = 60
 #SYNC_DOWNLOAD = no
 #SYNC_DOWNLOAD = yes
 #
+#
+#
 #######################################################################
 
 #######################################################################
@@ -559,14 +577,15 @@ DAEMON_PURGE = 60
 # filters the returned hosts to those that have been blocked this many
 # times by others.  That is, if set to 1, then if a single DenyHosts
 # server has denied an ip address then you will receive the denied host.
-#
-# See also SYNC_DOWNLOAD_RESILIENCY
 # 
+# See also SYNC_DOWNLOAD_RESILIENCY
+#
 #SYNC_DOWNLOAD_THRESHOLD = 10
 #
-# The default is SYNC_DOWNLOAD_THRESHOLD = 3
+# The default is SYNC_DOWNLOAD_THRESHOLD = 3 
+#
 #SYNC_DOWNLOAD_THRESHOLD = 3
-# 
+#
 #######################################################################
 
 #######################################################################
@@ -575,19 +594,19 @@ DAEMON_PURGE = 60
 # value specified for this option limits the downloaded data
 # to this resiliency period or greater.
 #
-# Resiliency is defined as the timespan between a hackers first known
+# Resiliency is defined as the timespan between a hackers first known 
 # attack and it's most recent attack.  Example:
-#
-# If the centralized   denyhosts.net server records an attack at 2 PM
-# and then again at 5 PM, specifying a SYNC_DOWNLOAD_RESILIENCY = 4h
+# 
+# If the centralized   denyhosts.net server records an attack at 2 PM 
+# and then again at 5 PM, specifying a SYNC_DOWNLOAD_RESILIENCY = 4h 
 # will not download this ip address.
 #
-# However, if the attacker is recorded again at 6:15 PM then the
-# ip address will be downloaded by your DenyHosts instance.
+# However, if the attacker is recorded again at 6:15 PM then the 
+# ip address will be downloaded by your DenyHosts instance.  
 #
-# This value is used in conjunction with the SYNC_DOWNLOAD_THRESHOLD
-# and only hosts that satisfy both values will be downloaded.
-# This value has no effect if SYNC_DOWNLOAD_THRESHOLD = 1
+# This value is used in conjunction with the SYNC_DOWNLOAD_THRESHOLD 
+# and only hosts that satisfy both values will be downloaded.  
+# This value has no effect if SYNC_DOWNLOAD_THRESHOLD = 1 
 #
 # The default is SYNC_DOWNLOAD_RESILIENCY = 5h (5 hours)
 #