search for: blacklistin

...;d like to see. I''d like to have a way for shorewall to be able to monitor a log file and take an action when a condition is met. For instance, if Shorewall could monitor /var/log/httpd/access_log for entries which I have defined (and know to be an attack), and then take an action such as blacklisting a host or domain (only for a certain length of time if possible), then that would be VERY useful. This functionality could also be useful for mail servers, ftp servers, and just about anything else where you know what the attack looks like in the logs. For instance, I run a web server (not the on...