Re: net-snmp trap failed login attempts
Dave Shield <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CAKoMtGZzuBvBPovOE8StdiChNMj-=85gCrpQTNWJ_eWXm2_LLQ@mail.gmail.com> |
On 11 August 2011 13:04, bruce bushby <[email protected]> wrote: > I can't find a search function to search the mail archives. If you go to the main project website www.net-snmp.org.uk there's an "archive search" field immediately below the navigation menu on pretty much every page. > I've been struggling to understand how I should configure net-snmp > (versions 5.3 - 5.5) to trap failed (unix user) login attempts. Ihave > tried adding > Authtrapenable 1 No - that's concerned with responding to failed *SNMP* authentication attempts. This is completely distinct from authentication failures for the underlying operating system. > Is it possible to have net-snmp send a snmptrap for failed login/su - attempts? The simplest approach would probably be to use the "logmatch" directive to check for such failures in the appropriate system log file. I'd also suggest looking at the 'denyhosts' mechanism, which does a fairly good job of blocking probe attempts. Dave ------------------------------------------------------------------------------ FREE DOWNLOAD - uberSVN with Social Coding for Subversion. Subversion made easy with a complete admin console. Easy to use, easy to manage, easy to install, easy to extend. Get a Free download of the new open ALM Subversion platform now. http://p.sf.net/sfu/wandisco-dev2dev _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users