E-mail after login attempts (fail2ban)



  • Hello,

    All day i am looking in to a way to use the e-mail report service to send me an e-mail after there where login attempts on the router.

    So far i know the service only allows me to send me a scheduled e-mail once a day.

    Is there a service out there that immediately notifies you after a login attempt on the router?

    any help appreciated

    Thansk

    Vriend


  • Rebel Alliance Developer Netgate

    Not at the moment. You could send the logs to a syslog server via syslog and have it check and notify you, but that's outside the scope of the firewall.

    The firewall already locks out addresses which have 15 login failures in 5 minutes (both SSH and GUI), and they are prevented from contacting the firewall at all for 1 hour.



  • @jimp:

    The firewall already locks out addresses which have 15 login failures in 5 minutes (both SSH and GUI), and they are prevented from contacting the firewall at all for 1 hour.

    Is it possible to change the amount of login attempts? For example that the firewall blocks the address after 3 login attempts.