From 6b6169178f7ccac2839b8b882a04bdb4a18f0c88 Mon Sep 17 00:00:00 2001 From: Daniel Black Date: Thu, 10 Oct 2013 10:00:20 +1100 Subject: [PATCH] ENH: mysql syslog jail.conf base --- config/jail.conf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/config/jail.conf b/config/jail.conf index 177db4c4..e7568fa7 100644 --- a/config/jail.conf +++ b/config/jail.conf @@ -365,6 +365,14 @@ action = iptables[name=mysql, port=3306, protocol=tcp] logpath = /var/log/mysqld.log maxretry = 5 +# If using mysql syslog [mysql_safe] has syslog in /etc/my.cnf +[mysqld-syslog-iptables] + +enabled = false +filter = mysqld-auth +action = iptables[name=mysql, port=3306, protocol=tcp] +logpath = /var/log/daemon.log +maxretry = 5 # Jail for more extended banning of persistent abusers # !!! WARNING !!!